Purpose-bound use
AI use requires a defined business purpose, accountable owner, approved data classification, and documented risk assessment proportionate to impact. Data access is limited to what the approved function needs, and customer data remains subject to the applicable agreement, privacy terms, regional requirements, and retention controls.
Customer data and model training
Intravo does not use customer content to train a provider's general-purpose model unless a contract and explicit customer authorization permit that use. Optional third-party AI, speech, or language providers receive data only when the related feature is enabled. Intravo-hosted processing may be available for selected configurations.
Risk review and human responsibility
Material AI uses are inventoried and reviewed according to their data, users, intended outcome, potential harm, security, privacy, legal requirements, vendor terms, and need for human oversight. People remain accountable for consequential decisions. AI output must be reviewed for accuracy, bias, confidentiality, intellectual property, safety, and suitability before use. Higher-impact uses require documented testing, human oversight, and rollback or disablement capability.
Transparency and choice
We provide product-specific information about material AI-assisted functions and available configuration choices. Where law requires disclosure that a person is interacting with AI or that content is artificially generated, we design the relevant experience to support that disclosure.
Safety and prohibited uses
Intravo policies prohibit entering customer, personal, confidential, credential, or regulated information into unapproved AI tools. AI must not be used for unlawful discrimination, deceptive impersonation, covert surveillance, unauthorized biometric categorization, or uses prohibited by law or customer agreement. It must not bypass security controls or take consequential action without approved controls and human oversight.
Regional processing and ongoing review
Confidential, customer, and personal data may be provided only to approved AI systems with appropriate contracts, access controls, retention settings, regional processing, and documented authorization. EU-origin data must follow the approved EU processing path; a contract alone does not override a stricter residency commitment. See our Data Residency standard.
AI systems require monitoring for security, quality, drift, misuse, and material changes. Significant changes trigger renewed assessment and approval.
Public statement
Download the Responsible AI and Data Use Statement, version 1.0 (PDF), effective September 24, 2026.
Questions
For a product-specific AI data-flow, provider, or control question, contact privacy@intravo.com or security@intravo.com.