AI Responsibility Statement

At CSIQ, we prioritise the privacy and security of our clients’ data, ensuring compliance with all applicable UK data protection laws, including the UK GDPR and the Data Protection Act 2018. Our use of artificial intelligence (AI), including private large language models (LLMs), is conducted with the utmost care and aligns with our commitment to transparency and responsibility.

No Customer Data in Public AI Services

We categorically do not use customer data—this includes company names, staff names, or personally identifiable information (PII)—in public AI services such as ChatGPT, Claude, or any other third-party platform. Your data remains confidential and is never exposed to external systems.

Private, Secure AI Operations

To support our intelligence operations, we exclusively utilise private LLMs hosted on private servers owned and operated by CSIQ. These systems are designed to process data securely and responsibly:

• Temporary Processing of PII: Any personally identifiable information (PII) processed is handled temporarily and strictly on servers and graphics cards owned and controlled by our organisation.
• End-to-end Encryption: All data is encrypted at rest and in transit, ensuring the highest level of security against unauthorised access.
• Controlled Access: Only authorised personnel have access to AI systems and data, with robust access controls overseen by our ISO 27001 policies and processes.

Compliance and Ethical Standards

The following principles guide our AI operations:

• Lawful Use: Data processing is strictly compliant with the UK GDPR and Data Protection Act 2018.
• Transparency: We are transparent about how AI technologies are utilised within our organisation.
• Data Minimisation: We only process data necessary for specific, legitimate purposes and retain it only for as long as required.
• Accountability: Regular audits and assessments ensure our AI systems remain secure, compliant, and free from biases.