AI Data Policy

1. Scope

This policy explains how we use AI tools in our work and how we handle client data when we build AI assistants, automations and integrations.

2. AI in our work

We may use AI tools to support writing, design and development. A member of the team always reviews the result before delivery.

We do not enter clients’ personal data or confidential information into tools that use it to train models.

3. AI projects for clients

• The client decides which data the system uses and is the controller of that data. We act as processor and sign a data processing agreement (Article 28 GDPR) when the project processes personal data, under section 7 of the Terms and Conditions.
• We name the model and infrastructure providers, and where the data is processed, in the proposal or, for the INDIGIT Subscription, before we start work on each request.
• We use only the data that is needed and, whenever possible, test with sample or anonymised data.
• We do not use a client’s data to train models or in other projects, unless agreed in writing.

4. Limits and transparency

AI systems can make mistakes. We design projects with human review for important decisions, and the client remains responsible for the decisions they take based on the system’s answers.

The assistants we build tell users that they are interacting with an AI system.

5. Contact

For questions about AI and data, write to hi@indigit.pt.