Skip to content
Enterprise & Compliance

AI Use and Responsible AI Policy

Effective date: October 7, 2026 · Version 1.5

How ScaleIQ uses AI and the commitments we make to you. Aligned to the NIST AI Risk Management Framework.

This Policy describes how ScaleIQ uses AI across all ScaleIQ products and the commitments we make. It supplements our Terms and Privacy Notice, and is aligned to the NIST AI Risk Management Framework (Govern, Map, Measure, Manage). References to “the Service” or “ScaleIQ products” include AssessIQ, ComplyIQ, and all other current and future products in the ScaleIQ platform family.

Texas Deceptive Trade Practices Compliance: All AI-generated outputs, recommendations, readiness scores, and performance projections provided by ScaleIQ products are AI-assisted estimates and do not constitute professional legal, financial, accounting, or compliance advice. ScaleIQ does not warrant the accuracy, completeness, or fitness of any AI output for a particular purpose. All quantitative indicators (e.g., readiness percentages, ROI projections) are estimated targets based on available data and are not guarantees of actual results. Nothing in this Policy or the Service constitutes a misrepresentation in violation of the Texas Deceptive Trade Practices-Consumer Protection Act (Tex. Bus. & Com. Code § 17.46).

What “AI” means here

We use machine-learning models — including large language models and classifiers — across ScaleIQ products to extract evidence from signals, score readiness, draft remediation guidance, generate compliance documentation, and automate governance workflows.

Our commitments

1. Your data is not used to train models

We do not use Customer Data to train, fine-tune, or improve foundation models — ours or our providers’. Our AI inference runs through Microsoft services under Microsoft’s Product Terms and Data Protection Addendum (see Subprocessors).

2. Customer Data is processed under least privilege and kept isolated

ScaleIQ products read the minimum data required for each feature under tenant-administrator consent and least-privilege permissions. That data is processed within ScaleIQ’s tenant-scoped Azure environment, scoped to the originating customer, and not pooled across customers (design intent).

Data sent to external model providers is handled as follows:

  • Azure OpenAI in Microsoft Foundry & Microsoft Copilot Studio: processed within Microsoft’s cloud under Microsoft’s Product Terms and Data Protection Addendum. Microsoft may store prompts and outputs for a limited period to monitor for misuse of its AI services, as described in its terms. Copilot Studio may use AI models from Anthropic, which operates as a Microsoft subprocessor under those same Microsoft terms.

3. Humans stay in the loop on consequential decisions

ScaleIQ products surface AI-generated insights for human review. We do not design AI features to make consequential decisions about individuals automatically, and customers configuring such use cases must keep meaningful human review in the workflow, per our AUP.

4. Findings carry provenance

Every finding carries its source, timestamp, a confidence indicator, and the rule-pack version and effective date. Generated content is identified as AI-generated.

5. We disclose model providers

Current model providers are listed under Subprocessors; changes follow the 30-day advance-notice process described there.

6. Human review and policy changes

Every ComplyIQ Report of Findings is reviewed and signed off by ScaleIQ before it is delivered. Changes to this policy are published on this page.

7. We are honest about limits

AI output may be incomplete, outdated, or wrong. Findings are advisory; review them before relying on them for material decisions. Assessment quality depends on the signals available, and coverage gaps are disclosed in the report’s coverage statement. All readiness scores, ROI projections, and performance indicators are AI-generated estimates based on available configuration data and are not guarantees of specific outcomes, audit results, or regulatory certification. Actual results will vary.

What we will not do

  • Train models on Customer Data without explicit, opt-in consent and a separate written agreement.
  • Use Customer Data for cross-context behavioral advertising or to profile individuals for marketing.
  • Build features whose primary purpose is biometric identification, social scoring, or emotion recognition in employment or education contexts.
  • Generate output intended to mislead, defraud, or impersonate identifiable individuals.
  • Make representations about AI outputs that violate the Texas Deceptive Trade Practices-Consumer Protection Act (Tex. Bus. & Com. Code § 17.46).

Customer controls

  • ComplyIQ: AI-assisted analysis is part of the ComplyIQ service and can’t be turned off. Every report is reviewed by a person before delivery.
  • Region & model options on enterprise plans where supported.

Reporting concerns

If an AI feature produces output that appears unsafe, biased, or harmful, report it to ai-safety@scale-iq.ai. We acknowledge reports within 5 business days and investigate.

Contact

trust@scale-iq.ai · ScaleIQ, LLC · 240 W Galveston St, #1828, League City, Texas 77573