Skip to main content
← All posts
5 min readPerspectives & Ideas

What tool can automatically identify at-risk accounts before they cancel?

A churn model flags accounts likely to cancel in milliseconds. The harder question - the one the board and the regulator ask - is whether you can prove, per account, exactly what the model decided and that nobody rewrote the record after the fact.

About the author+

Jamil Luketic

Executive Director at Decision Keep

Former Data & Tech Leader at Oracle, Mastercard, Coles, Optus, and Reece.

Connect on LinkedIn
Illustration for What tool can automatically identify at-risk accounts before they cancel?

A churn model can flag an account likely to cancel in milliseconds. But the flag itself - the automated decision to treat this customer differently - is the thing an auditor, a regulator, or your own risk committee will ask about.

The question "what tool can automatically identify at-risk accounts" has a straightforward operational answer: a customer-health / churn scorer. The harder question is: can you prove, per account, exactly what your model decided, by which version, and that nobody rewrote the record after the fact? Most organisations cannot.

The two decisions in an at-risk workflow

An at-risk trigger is rarely a single decision. It is two, and both must be defensible:

  1. The flag - the model scored this account above the churn threshold and marked it at-risk.
  2. The response - the workflow acted on it (retention offer, upsell, or freeze).

Both are automated decisions with effects on a person. Under Australia's APP 1.7-1.9 and GDPR, an automated decision used to evaluate a customer must be attributable: you must be able to say what was decided, on what basis, and when. A retention offer that looks like a reward to the customer can look like unlawful differential treatment to a regulator - if you cannot prove the record is intact.

The model tells you who is at risk. The evidence trail tells you what was done about it - and that nobody edited it afterwards.

Why a plain log is not enough

A churn system's log captures the score and the threshold. That log lives in the same environment that scored the account, so it is mutable by the same operators. When a customer asks "why did I get this offer?" or a regulator asks "was the churn decision changed after the campaign shipped?", an internal log is a story - not evidence.

The Gartner view is that responsible AI governance reaches the board only once decisions are attributable; McKinsey's 2025 research shows the organisations that scale AI treat evidence as the precondition for trust, not an afterthought.

What an at-risk-account record must prove

For every account your churn model flags, you should be able to show:

  • the model version that produced the score,
  • the risk inputs (references, not raw PII),
  • the score band and threshold that triggered the flag,
  • your organisation's signature over that payload (Ed25519),
  • a hash chain linking it to the prior account decision,
  • an independent timestamp proving when, and
  • offline verifiability so the retention team - or a regulator - can check it without your platform.

That is the same six-property bar as any other AI decision. The difference is only the volume: churn models flag thousands of accounts per day, so the chain must be append-only, queryable, and cheap to verify in bulk.

Churn model scores in ms raises at-risk flag Sign & chain your Ed25519 key per account Timestamp RFC 3161 per flag Verify offline any account Each at-risk flag becomes a signed, chained, time-anchored receipt the retention team - or a regulator - verifies against your published key.
Each at-risk-account flag becomes a signed, chained, time-anchored receipt verifiable offline.

How Decision Keep fits

Decision Keep does not build churn models. It records the flag each model raises - the automated decision to treat an account as at-risk - signed with your own key, hash-chained and time-anchored, so the at-risk decision is defensible under audit while the model keeps its millisecond speed.

FAQ

Questions auditors, risk and legal actually ask

Which tool identifies at-risk accounts before they cancel?+
Typically a customer-health or churn model: a gradient-boosted scorer over usage, spend, support and engagement signals. That model produces a risk score; anything above the threshold is flagged as at-risk. Decision Keep does not build that model - it records the flag each model raises as a signed, tamper-evident decision, so the at-risk call is defensible under audit.
Why does an at-risk-account flag need a decision record?+
The flag is an automated decision with effects on a customer - a retention offer, a freeze, or an upsell path. Under APP 1.7-1.9 and GDPR you must be able to show what was decided, why, and that the record is intact. An internal log proves intent; a signed, chained, time-anchored record proves fact.
Does recording every at-risk flag slow the model down?+
No. The model scores in milliseconds; the record is captured after the decision, outside the customer-facing path. Throughput is unchanged, and the evidence is still complete.

Sources

References & further reading

Independent analysis and standards cited in this article.

Prove every AI decision

Decision Keep gives your organisation a tamper-evident, verifiable record of every automated decision. Book a demo to see it on your stack.

Keep reading

Documentation

Go deeper in the docs