Privacy
Personal data should be processed only for appropriate business purposes and handled according to applicable data protection requirements.
SECURITY & TRUST
Built on trusted infrastructure.
AiCOAG combines managed AI and business technology with carefully selected underlying infrastructure. Security, privacy and responsible implementation are considered when we select, configure and manage the technology behind our services.
The exact technology and safeguards used can vary depending on the AiCOAG solution and client requirements.
OUR APPROACH
Trust is considered across the whole implementation.
Security
We consider the security practices and controls of the technology providers used to deliver AiCOAG services.
Responsible AI
AI should be applied with a clear business purpose, realistic expectations and appropriate human judgement.
Managed Implementation
AiCOAG designs, configures and manages solutions around the client's business rather than simply handing over another technology platform.
TRUSTED TECHNOLOGY
The infrastructure behind AiCOAG matters.
AiCOAG uses specialist technology providers to deliver different parts of its managed services.
When selecting and configuring technology, relevant considerations may include:
- security controls
- independent audits or certifications
- privacy capabilities
- data processing arrangements
- data residency options where available
- access controls
- encryption capabilities
- retention controls
- reliability
- integration security
The exact technology stack may differ by service and implementation.
INDEPENDENT SECURITY STANDARDS
Supported by infrastructure assessed against recognised security standards.
Depending on the AiCOAG service and configuration, underlying technology providers may maintain independent certifications or attestations against recognised frameworks such as:
ISO/IEC 27001:2022
Information Security Management
SOC 2 Type II
Security controls independently assessed over time
These certifications and attestations apply to specific underlying technology providers used within the AiCOAG technology stack. They do not represent certifications held directly by AiCOAG.
DATA PROTECTION
Privacy is part of the architecture.
AiCOAG is based in the Netherlands and operates within the European data protection environment.
Depending on the processing activity, AiCOAG may act as a controller for its own website and business operations, or as a processor when processing personal data on behalf of a client.
Where required, processing relationships are supported by appropriate contractual arrangements such as a Data Processing Agreement.
Data processing depends on the solution.
Different AiCOAG services may use different infrastructure and processing locations.
Where relevant to a client implementation, AiCOAG considers:
- data residency options
- international data transfers
- applicable contractual safeguards
- subprocessor relationships
- client requirements
Some underlying providers may offer European data-processing or routing options. A specific location is confirmed only for the relevant implementation.
SERVICE LIFECYCLE
Security across the service lifecycle.
- 01
Select
We consider the security and privacy posture of technology used in AiCOAG solutions.
- 02
Configure
Services are configured around the requirements of the agreed implementation.
- 03
Control
Access and data handling should be limited appropriately to the service and business purpose.
- 04
Monitor
Managed services may be reviewed for operational issues and appropriate improvements within the agreed scope.
- 05
Improve
Configurations may evolve as technology, business requirements and risks change.
Responsible AI is part of trust.
AI systems can be powerful but are not infallible. AiCOAG designs AI-powered services around defined business purposes and appropriate operational boundaries.
Depending on the implementation, safeguards may include:
- defined knowledge and instructions
- controlled business workflows
- escalation paths
- human involvement where appropriate
- testing before launch
- ongoing configuration improvements
Communication data deserves careful handling.
AiCOAG Voice and AiCOAG Chat may process customer communication information as part of delivering configured services.
Depending on the implementation this may include:
- call information
- conversation content
- transcripts where enabled
- contact information
- booking information
- enquiry information
Recording or transcription is not automatically enabled in every implementation. Where relevant, configuration should take account of applicable privacy, transparency and legal requirements.
Technology providers and subprocessors.
AiCOAG may rely on specialist third-party providers to deliver parts of its services.
Where those providers process personal data on behalf of AiCOAG in a processor relationship, appropriate data-processing arrangements should apply as required.
Relevant subprocessor information will be maintained based on the actual production technology stack and client configuration.
Data Processing AgreementImplementation-specific by design.
Security, privacy, data-processing and operational requirements can differ between services and businesses. The relevant configuration is considered in the context of the proposed implementation.
This page describes AiCOAG's general approach. It does not replace client-specific agreements, configuration decisions or verified provider documentation.
FOR CLIENT SECURITY REVIEWS
Need more detail before working with us?
Security and data-processing requirements can vary significantly between businesses.
Where appropriate during the sales or onboarding process, AiCOAG can provide relevant information about the proposed service configuration, data-processing arrangements and underlying technology considerations.
Discuss Your Requirements