HMRC / Service Design + AI Governance

Designing an AI-enabled customs triage service around human judgement, traceability and control.

Service discovery and future-state design for an AI-enabled data-processing service supporting customs-document triage.

The service uses AI risk assessment to help caseworkers identify declarations requiring further attention while keeping consequential decisions within a human-controlled operational process.

The work connects service design, operational workflows, data science, policy, compliance, human review and AI governance.

01 ORGANISATION HM Revenue & Customs
02 DOMAIN Customs & Compliance
03 ROLE Service Designer
04 FOCUS AI-Enabled Triage
HMRC / AI-ENABLED CUSTOMS SERVICE PROJECT CONTEXT IMAGE
HM Revenue and Customs AI-enabled customs triage service design case study
CUSTOMS / CASEWORKER TRIAGE / AI GOVERNANCE HMRC / DIGIFIXIT CASE STUDY
PUBLIC-SAFE CASE STUDY

This page intentionally excludes real taxpayer or trader data, live risk thresholds, model parameters, production logs, security configuration and internal identifiers. The diagrams communicate the service-design and AI-governance structure rather than operationally sensitive implementation detail.

HMRC / AI-ENABLED CUSTOMS TRIAGE DOCUMENT → MODEL → CASEWORKER → DECISION → FEEDBACK
01 INPUT

Customs documentation

Structured and unstructured information enters the processing service.

02 PREPARE

Data processing

Relevant data is prepared for the assessment workflow.

03 MODEL

AI risk assessment

The model produces signals used to support triage.

04 INTERFACE

Caseworker view

Relevant information, risk indicators and context are surfaced.

05 HUMAN

Review & judgement

A caseworker evaluates the case rather than blindly accepting the model.

06 ACTION

Operational outcome

The case continues through the appropriate compliance route.

07 LEARN

Feedback & monitoring

Outcomes, overrides and behaviour provide evidence for service and model governance.

Overview

The design challenge was not simply to place an AI model inside an existing customs process.

The wider service needed to explain where AI participates, what information reaches the caseworker, where human judgement is required and how operational decisions can remain traceable.

Service discovery mapped end-to-end data flows, decision points, operational processes, dependencies and human intervention. Future-state blueprinting connected those components with the caseworker experience and the governance controls needed around the AI-enabled service.

AI GOVERNANCE PRINCIPLE

Govern the service decision, not only the model. Data, model output, human judgement, operational action and evidence must remain connected.

Service design contribution

From AI capability to an operational service caseworkers can use.

The work translated technical AI capability into service structures, workflows, interfaces and governance requirements.

01 DISCOVERY

End-to-end service mapping

Mapped existing processes, systems, decision points, actors and service dependencies.

02 DATA

Information flow

Made the movement of customs information through processing, assessment and review visible.

03 AI

Model participation

Defined where the model contributes and where its responsibility ends.

04 HUMAN

Caseworker intervention

Designed the points where human review, challenge, escalation and judgement remain essential.

05 BLUEPRINT

Future-state service

Connected frontstage caseworker activity with backstage systems, operations, policy and model services.

06 PROTOTYPE

Triage interface design

Designed and tested prototype concepts for internal caseworker triage and decision support.

AI service blueprint

Connect the model with the operational service around it.

A model score only becomes useful when the surrounding service can interpret, challenge, act on and audit it.

HMRC / FUTURE-STATE AI SERVICE BLUEPRINT INPUT → ASSESS → TRIAGE → REVIEW → ACT → LEARN
STAGE
01Receive
02Process
03Assess
04Review
05Act
06Learn
CASEWORKER
Case arrives

Relevant customs information becomes available.

Context available

Information required for triage is prepared.

Risk indicators

AI-supported indicators are presented.

Human judgement

Caseworker reviews evidence and challenges where required.

Operational action

The appropriate next step is selected.

Outcome feedback

Decision and result contribute to service evidence.

MODEL
Input boundary

Only approved information enters the model workflow.

Feature preparation

Data is transformed for assessment.

Inference

Model generates an assessment or risk signal.

Explanation

Useful context supports interpretation.

No autonomous action

The model does not independently determine the case outcome.

Monitoring

Performance and failure patterns are reviewed.

OPERATIONS
Receive workload

Cases enter the operational service.

Route information

Systems coordinate data movement.

Prioritise

AI outputs contribute to workload triage.

Escalate

Unclear or higher-risk cases follow defined routes.

Process case

Operational action remains accountable.

Improve

Service feedback supports refinement.

GOVERNANCE
Purpose

Approved use and boundaries remain documented.

Data lineage

Inputs and processing remain traceable.

Model version

Assessment is linked to the deployed model.

Human oversight

Human responsibility is explicit.

Decision record

Action and rationale can be reconstructed.

Audit & monitoring

Evidence supports assurance and incident response.

AI governance lifecycle

Governance from initial use case through retirement.

Governance is designed as a lifecycle rather than a single approval checkpoint.

Each stage produces evidence and a decision about whether the service should continue.

01 INTAKE & APPROVAL

Is AI appropriate?

Define purpose, affected users, boundaries, ownership and initial risk.

02 DATA & MODEL

Are the choices acceptable?

Assess data, model approach, privacy, explainability, security and tooling.

03 VALIDATION

Does it meet requirements?

Test performance, bias, robustness, human usability and residual risk.

04 DEPLOYMENT

Is the service ready?

Confirm operational readiness, controls, logging, human oversight and rollback.

05 MONITORING

Does it remain controlled?

Monitor drift, outputs, complaints, overrides, failures and service impact.

06 INCIDENT RESPONSE

What happens when it fails?

Contain, investigate, remediate, restrict, redesign or pause the system.

07 RETIREMENT

How does governance close?

Decommission safely while retaining the required governance evidence.

Participation diagram

AI governance is a shared service responsibility.

No single discipline can safely design, operate and govern an AI-enabled decision-support service.

HMRC / MULTIDISCIPLINARY PARTICIPATION SERVICE + POLICY + DATA + GOVERNANCE + OPERATIONS
01 SERVICE

Service Designer

Maps journeys, processes, intervention points, requirements and the future service.

02 POLICY

Policy & Compliance

Defines policy intent, legal boundaries and decision requirements.

03 AI

Data Scientists

Develop and explain model behaviour, limitations and performance.

04 OPERATIONS

Caseworkers

Apply professional judgement and provide evidence from real operational use.

05 GOVERNANCE

AI Risk & Assurance

Maintains decision gates, risk ownership and governance evidence.

06 TECHNOLOGY

Engineering

Implements model, integration, observability, security and deployment controls.

07 DELIVERY

Product & Delivery

Coordinates service priorities, dependencies and implementation.

08 SHARED

Human accountability

The organisation remains accountable for how AI influences the service decision.

Governance evidence architecture

Connect the case, the model and the decision logs.

A defensible AI service needs enough evidence to reconstruct what happened, which model participated and what the human ultimately decided.

CASE → MODEL → OUTPUT → HUMAN DECISION → LOGS → GOVERNANCE TRACEABILITY MODEL
01 CASE

Case record

The operational case and approved input context form the starting evidence.

02 MODEL

Model version

Record which approved model or configuration participated in the assessment.

03 OUTPUT

AI assessment

Capture the risk signal, relevant explanation and confidence context where appropriate.

04 HUMAN

Decision & override

Record what the caseworker decided and whether the AI recommendation was challenged.

05 LOGS

Audit trail

Timestamp events, model calls, version changes, exceptions and operational actions.

06 GOVERNANCE

Assurance evidence

Connect service evidence with monitoring, review, incident response and governance.

Model governance

The model needs its own evidence, but never in isolation.

Model evidence becomes meaningful when it can be connected to service purpose, real cases and human decisions.

01 MODEL CARD

Purpose & boundaries

Approved use, intended users, limitations, prohibited uses and named ownership.

02 DATA

Lineage & provenance

Document where data came from, how it was prepared and which version was used.

03 VALIDATION

Performance evidence

Record testing, false positives, false negatives, fairness, robustness and known limitations.

04 VERSION

Configuration control

Connect live service decisions to the deployed model and approved configuration.

05 MONITORING

Operational behaviour

Review drift, failure patterns, human overrides and service impact.

06 INCIDENT

Investigation evidence

Retain enough history to investigate unsafe or unexpected model behaviour.

Outcome

The service-design approach made the AI-enabled customs service visible as a connected system rather than a standalone model.

Data movement, model participation, human judgement, operational workflow and governance evidence could therefore be considered together when shaping the future service.

No quantitative operational, compliance or model performance outcomes are presented on this public case study. The emphasis is the service-design approach, multidisciplinary participation, human oversight and governance architecture.

Service Design + AI Governance

AI needs more than a model. It needs a governable service.

DigiFixIT connects service design, operational transformation and AI governance so organisations can understand how AI actually participates in a service.

Start a project

Scroll to Top