Responsible Artificial Intelligence Policy
At Kairos, AI helps decide, but the rules are defined by the client and anything doubtful is always reviewed by a person.
Our 8 commitments
- Explicit rules. Every automation has a decision matrix written and approved by the client. The AI does not invent rules.
- Human in the loop. Whatever does not meet clear criteria goes to human review. No decision affecting people’s rights is left solely in the hands of the AI.
- Verification afterwards. Every bot action is checked after it runs and is audited.
- Privacy by design. Sensitive data is processed on the client’s infrastructure, minimized and, where possible, anonymized.
- We do not train on your data. Neither our own models nor third-party ones.
- Transparency. We document which models we use, for what and with what limits. Conversational agents identify themselves as automated assistants.
- Fairness and quality. We test with fictitious cases (“seeded tests”) and measure errors before and after going to production.
- Accountability. Every project has an owner at Kairos and another at the client, with an incident response plan.
Uses we do not accept
- Surveillance or profiling of people without a legal basis.
- Impersonation or deceptive content.
- Evading security controls, captchas or third-party terms.
- Automated decisions on credit, employment or health without human review.
Risk classification of each project
| Level | Example | Controls |
|---|---|---|
| Low | Reports, internal FAQs | Testing + monitoring |
| Medium | Customer service, invoice entry | + approved matrix, audit and weekly samples |
| High | Healthcare, insurance, finance, sensitive data | + execution on the client’s infrastructure, DPA, mandatory human review of exceptions and 100% audited pilot |