AI Privacy Policy

View data protection policies and configure AI feature consent requirements

Data Protection Overview
Your data is protected by enterprise-grade privacy controls

Mandatory Protections (Always Active)

Organisation names are always masked before AI processing
Personal names are always masked before AI processing
Email addresses are always masked before AI processing
Requests with incomplete sanitisation are always blocked

Compliance Guarantees

No customer data is exposed to external AI providers
No sensitive identifiers leave the platform
All AI outputs are traceable and sanitised
Token mappings never persist beyond request lifecycle

Current Policy Settings

Strict mode: Enabled
Zero retention enforcement: Enabled
AI call logging (metadata only): Enabled
Maximum prompt length: 50000 characters
Document ingestion: Allowed
AI Feature Consent Status
Current consent requirements for AI features

Require explicit consent for all AI features by default

Disabled

Business Case

Generate benefit suggestions based on business context

No Consent

Generate scenario alternatives for comparison

No Consent

Reporting

Generate executive summaries from business case data

No Consent

Risk Management

Identify potential risks from project context

No Consent

Strategy

Generate strategic outcomes based on benefits

No Consent

Data Import

Extract data from uploaded documents

No Consent

Surveys

Generate survey questions for data collection

No Consent

Benchmarks

Extract benchmarks from external reports

No Consent

Generate industry benchmarks from external sources and web research

No Consent
How AI Privacy Protection Works

1. Data Masking

Sensitive data like names and emails are tokenised before any AI processing

2. Secure Processing

Only masked data is sent to AI models with zero retention policies

3. Response Rehydration

Tokens are restored to original values only on your secure session