Responsible AI & Data Use Notice

Certain iShield products, services, modules, and features may use artificial intelligence and machine-learning technologies to support capabilities such as:

• Analysis of service, customer, operational and integration information
• Automation of routine or repetitive tasks
• Recommendations and prioritization
• Summarization of records, evidence, and documentation
• Classification, mapping, and categorization
• Decision support and insight generation
• Intelligent assistance, including conversational assistance
• Other AI-enabled functionality described in product documentation

Not every iShield product, module, or function uses artificial intelligence. Availability of AI-enabled functionality depends on the product, subscription, configuration, and applicable contractual terms.

AI-generated outputs are intended to assist users and authorized personnel. They should not automatically replace appropriate professional or human judgment.

Where a decision may have significant legal, regulatory, financial, security, employment, compliance, risk, or other material consequences, appropriate human oversight, review, and validation should be applied before relying on an AI-generated output.

Different features apply different levels of automation. Customers and authorized users remain responsible for configuring, supervising, and using AI-enabled functionality appropriately within their own governance frameworks.

Customer, business, technical, confidential, proprietary, and other protected information processed through AI-enabled functionality is handled subject to:

• Applicable contractual obligations
• Confidentiality requirements
• Security requirements and controls
• Documented customer instructions and configuration
• Applicable laws and regulations

Users must not submit information to AI-enabled functionality unless they are authorized to provide that information and to have it processed for the intended purpose.

Where personal data is processed through AI-enabled functionality, that processing remains subject to our Privacy Notice, applicable data-protection requirements, and any applicable contractual terms.

Personal data may be processed by AI-enabled functionality where such processing is authorized, appropriate, and lawful. Where applicable, we seek to apply principles including:

• Purpose limitation
• Data minimization
• Access control and authorization
• Least privilege
• Appropriate masking or protection of sensitive information
• Retention controls
• Secure deletion or disposal

Users should avoid submitting sensitive personal data to AI-enabled functionality unless it is necessary, authorized, and appropriate for the intended purpose.

iShield does not use customer personal, confidential, or proprietary data to train public or third-party general-purpose AI models unless such use has been expressly authorized or agreed in writing and is subject to appropriate contractual, privacy, and security safeguards.

Where model tuning, configuration, or improvement activity is performed for a customer environment, it is carried out in accordance with the applicable customer agreement and data processing terms.

AI-enabled processing is subject, as applicable to the relevant product and deployment, to iShield security controls, which may include:

• Authentication and authorization
• Role-based access control
• Least privilege
• Data-access controls
• Logging and monitoring
• Tenant isolation, where applicable
• Protection of confidential information
• Secure integration practices
• Periodic access review

Further information on our approach to security is available on our Trust Center. We do not publish internal security architecture, credentials, or implementation detail.

Information processed through AI-enabled functionality is retained in accordance with applicable retention requirements, contractual commitments, legitimate business requirements, customer configuration where supported, and applicable law.

Retention periods vary by product, data category, deployment, and jurisdiction. No single universal retention period applies to all AI-related processing.

We aim to provide appropriate transparency where artificial intelligence materially contributes to user-facing analysis, recommendations, generated content, or decision support.

Where appropriate, AI-enabled functionality is identifiable to users through the product interface, product documentation, or applicable notices.

AI-generated information can occasionally be incomplete, inaccurate, outdated, or otherwise unsuitable for a particular purpose. Outputs may depend on the quality, completeness, and configuration of the underlying inputs.

Users should apply appropriate professional judgment and validation before relying on AI-generated outputs, particularly for material decisions. This Notice complements, and does not replace, the disclaimers and limitation-of-liability provisions set out in our Terms of Service.

For questions regarding our use of AI, privacy, or data handling, please contact us using the contact information provided in our Privacy Notice.

Related documents:

• Privacy Notice
• Terms of Service