AI use policy
Draft · pending legal review
Scope
This policy covers every automation Zyntho builds, deploys, or operates on behalf of a client, and the AI models used within them. It applies to all staff, contractors, and systems.
It sits alongside our Data Processing Agreement and Terms of Service, and is reviewed at least annually.
Models used
Our default reasoning model is Anthropic Claude, selected on a per-task basis between Haiku and Sonnet tiers according to the depth of reasoning required. Other models may be integrated where they are a better fit for a specific step.
We document which model is used for each automation in the client runbook, and notify clients of material changes.
Data handling
Client data is processed only to deliver the contracted automation. No client data is used to train any model. Data residency stays in the UK by default.
Read access is preferred over write access during pilots. Production access is scoped to the minimum required for the automation to function.
Human oversight
Every automation has a named human owner on the client side and an operator on the Zyntho side. High-impact actions are gated behind human review by default.
Clients can pause any automation at any time. Escalation paths are documented before go-live.
Training data
We do not train models on client data. Where a model is configured with examples or context, those are held within the client environment and not shared across engagements.
Guardrails
Automations are built with input validation, output checks, and fallbacks for ambiguous or low-confidence cases. Where an automation cannot act safely, it escalates to a human rather than guessing.
Audit logging
Production automations log their inputs, decisions, and outputs to a client-accessible record, retained per the agreed retention period. Logs support review, debugging, and compliance.
Update process
This policy is versioned. Material changes are communicated to active clients with reasonable notice. The current version and date are recorded at the top of the page once finalised.