Responsible AI Usage
This policy describes how Zimmic — ZLabs S.R.L., together with its affiliated companies Zimmic LLC and Zimmic E.A.S. — uses artificial intelligence tools in its work, and the safeguards we apply when doing so. It reflects our approach as of the date above and evolves as the technology and our practices do.
Human Oversight
AI tools assist our professionals; they do not replace them. Work products that involve AI assistance are directed, reviewed, and approved by qualified people, and Zimmic remains accountable for the quality of what we deliver.
Confidentiality and Customer Data
- Customer confidential information is handled under the confidentiality obligations of the applicable agreement, whether or not AI tools are involved.
- We do not use customer confidential information to train publicly available AI models unless expressly authorized by the customer.
- We apply data minimization: only the information needed for a task is used with an AI tool, and we prefer configurations that limit retention and reuse of submitted data.
- Where an engagement calls for the use of AI tools with customer data or systems, we work within the authorization and terms agreed with that customer.
Access Controls
Access to AI tools used in customer work is managed under the same identity and access practices described in our Security Overview, including role-based access and least privilege.
Vendor Assessment
AI tools and providers are assessed before adoption, considering their security practices, data handling and retention terms, and contractual commitments, consistent with our third-party risk management practices.
Output Validation
AI-generated output can be incorrect. Output that contributes to a customer deliverable is validated by qualified professionals before delivery, using the same review standards we apply to any other work product, including code review for software deliverables.
Intellectual Property
We take intellectual property into account when using AI tools: we work to respect third-party rights in the materials we use and produce, and to preserve the ownership and licensing expectations set out in the applicable customer agreement.
Security and Privacy Review
The use of AI tools is subject to Zimmic's security and privacy practices, including the ISMS described in our Security Overview and the commitments in our Privacy Notice.
Disclosure
Where AI use materially affects a customer deliverable, we disclose that use to the customer.
Customer-Specific Terms
Where a customer agreement contains specific terms about the use of AI, those terms take precedence over this general policy for that engagement.
Contact
For questions about this policy, contact legal@zimmic.com or your Zimmic account contact.
