The principles governing the use of artificial intelligence at Mr Suricate, how we assess the risks involved, and the controls we implement.
This AI Governance Statement describes the principles, commitments, and governance mechanisms implemented by MR SURICATE the use of artificial intelligence (AI) technologies within its SaaS platform.
This document is for informational purposes only and does not constitute a standalone contractual commitment. Applicable commitments are defined in the Contract, the DPA, and the SLA.
Scope of AI Features
The AI technologies integrated into the MR SURICATE platform MR SURICATE be used in:
AI functionalities are designed as assistive tools. They do not supersede human intervention or user validation.
Guiding Principles
MR SURICATE to design AI mechanisms that are robust and resilient in order to minimize operational errors or unexpected behavior. MR SURICATE the following principles:
Operational decisions remain under user control.
AI-generated suggestions require human validation.
The utilization of AI mechanisms is proportionate to the technical objective of the service.
MR SURICATE to document:
AI components comply with the security standards applicable to the platform:
The use of AI mechanisms complies with GDPR requirements.
MR SURICATE to limit the exposure of personal data whenever possible, in particular by prioritizing:
Risks associated with AI technologies are integrated into the ISMS risk analysis. These risks may include:
Identified risks are monitored as part of continuous improvement.
When appropriate, MR SURICATE analyze the results of AI systems to identify any technical biases or unexpected behavior.
MR SURICATE its AI use cases in light of the European Artificial Intelligence Act (AI Act).
The AI features are intended to provide technical support in the field of automated testing.
They do not make legal or automated decisions that directly affect individuals.
Given their current purpose, the AI systems deployed by MR SURICATE considered to fall under:
AI systems with limited risk
or
Technical assistance tools that do not constitute high-risk systems as defined by the AI Act.
AI functionalities are not used for:
Consequently, they do not fall under the categories of high-risk AI.
MR SURICATE continuously MR SURICATE regulatory developments in order to adapt its governance mechanisms in the event of functional or regulatory changes.
Model & Data Lifecycle Governance
MR SURICATE governance principles that cover the entire lifecycle of AI components and associated data.
AI models can be:
Prior to integration, an evaluation is conducted focusing on:
AI components are executed within secure environments that adhere to:
MR SURICATE that:
Customer data utilized within the platform is not used to train public or third-party artificial intelligence models without explicit contractual agreement.
Administrative actions related to AI functionalities are logged in accordance with the platform's logging policy.
Traceability aims to:
Evolutions of AI mechanisms are:
MR SURICATE monitor:
This monitoring aims for continuous improvement and does not constitute a guarantee of absolute accuracy.
When third-party services are utilized:
MR SURICATE changes in the applicable regulatory frameworks, including:
Current AI mechanisms are designed as technical assistance tools and do not constitute high-risk AI systems.
Responsibility
AI features are provided on a best-efforts basis.
MR SURICATE guarantee either the absolute accuracy or the absence of errors in the generated suggestions. The user remains responsible for validating the actions taken.
The governance of AI mechanisms is monitored as part of MR SURICATE WSIS framework MR SURICATE may be subject to periodic security and compliance reviews.
The described measures are subject to evolution as part of:
Subject to the maintenance of an equivalent level of security and compliance.
Contact
For any questions regarding AI governance: suricate@mrsuricate.com
The security team responds to inquiries from clients and prospects, including security questionnaires and due diligence requests.