Security and data handling
Review how your documents are handled, too.
How documents are handled, how models are used and the processing conditions are all part of scoping the pilot. We go through them with your teams before any test on your documents.
Data read and checks
Verified reading
Extracted values are checked against the content of the document. A value that cannot be confirmed is flagged as such.
Explicit rules
Checks and their effect on the status are defined by versioned rules. The case sets out the resulting findings.
Clearly identified use of AI
AI is used to read documents. It may also give a separate opinion on whether a purchase is unusual. That opinion is presented as such to the analyst and does not change the case status.
Your team’s decision
Findings and opinions prepare the review. Your institution decides what happens to the transfer.
Document intake
Files are opened in an isolated environment to check their format and safety.
Social security numbers detected are masked before storage. A document whose required masking cannot be confirmed is rejected.
Processing conditions
| Processing and hosting location | [To be completed: hosting country and region, where the reading model processes data] |
|---|---|
| Providers that receive data | [To be completed: each provider and its role] |
| Retention and deletion | [To be completed: retention period set per institution, deletion method] |
| Protection and access control | [To be completed: encryption, per-institution isolation, access log] |
Documents for your assessment
- Data processing agreement[to publish once ready]
- List of sub-processors[to publish once ready]
- Description of security measures[to publish once ready]