What AI can and cannot do

AI systems can save time on repetitive and information-heavy work. Their outputs may also be inaccurate, incomplete or out of date, and should be reviewed by a person where the result matters. No business, revenue, productivity or cost-saving outcome is guaranteed.

Controls for consequential actions

AI systems should not perform sensitive or consequential actions — such as sending binding commitments, moving money, changing records of legal significance or making decisions about individuals — without appropriate controls. Depending on project risk, we implement:

• human approval before such actions are carried out;
• activity logs recording what the system did and when;
• access controls limiting who and what can use the system; and
• escalation procedures for uncertain, unusual or sensitive cases.

Permissions and data access

Each system is given only the permissions it needs for the agreed workflow. You must ensure you are authorised to provide or connect any data the system uses, including personal data about your customers, staff or residents, and that you have any notices or consents the law requires for that use.

Third-party AI providers

Our systems may use third-party AI models, platforms and automation tools. These providers have their own terms and data-processing practices, including how long they retain data and whether it may be used to improve their services. Where it matters for your project, we will identify the providers involved and the configuration used, and we will not make claims about provider data handling unless they have been verified for that configuration.

Your responsibilities

You remain responsible for defining the approved use cases for any AI system, for how it is used in your business, and for complying with the laws that apply to that use — including privacy, consumer protection and sector-specific rules.

What the project agreement specifies

Where we build or configure an AI system, the project agreement sets out:

• the intended functions of the system;
• the data and systems it may access;
• exclusions — what it must not do;
• dependencies on third-party services; and
• who is responsible for ongoing monitoring, review and updates.

Questions

Contact us at info@xurutechnologies.com or +91 87992 91881, Monday to Friday.