Solve Intelligence primarily collects data from (1) Internal company information such as legal documentation, patent documentation (2) user prompts into our AI system and (3) Public patent data from the internet.

We do not collect sensitive PII data (e.g., health or political) from any of these sources.

For more details see our AI security documentation.

We require our LLM providers to use customer information only for the purpose of facilitating the Solve Intelligence tool, and we do not allow these providers to train their AI models using personal customer personal information.

Customer data sent via our provider’s API is never written to any persistent storage. Once a response is generated and returned, the input is deleted immediately and no logs are retained for monitoring or abuse purposes in accordance with our zero-data-retention agreement.

We do not use sensitive customer data to train our AI tool, with respect to both in-house AI models and third-party AI models. Additionally, we require our third-party AI providers to use the information only for the purpose of facilitating the Solve Intelligence tool, and we do not allow these providers to train their AI models using personal information.

We collect only minimal PII. Specifically user email addresses for authentication and, optionally, first and last names, solely for account creation and access control; no other PII is collected or stored.

Data hosted by our LLM foundation model providers is hosted in the US. We can switch server hosting for customers upon request.

Solve Intelligence shall retain data as long as the company has a need for its use, or to meet regulatory or contractual requirements. Once data is no longer needed, it shall be securely disposed of or archived. Data owners, in consultation with legal counsel, may determine retention periods for their data. Personally identifiable information (PII) shall be deleted or de-identified as soon as it no longer has a business use.

Highly sensitive data requires the highest levels of protection; access is restricted to specific employees or departments, and these records can only be passed to others, with approval from the data owner, or a company executive.

See our data security documents.

Solve Intelligence has demonstrated its effectiveness and validity through a combination of internal testing, real-world client feedback, and continuous performance monitoring.

Performance is continuously monitored by Solve Intelligence. Primary metrics include search latency, hallucination rates, and context awareness rates.

We consistently collect event logs for our AI models and tools.

Given the complexity of Large Language Models (LLMs) we utilize, complete explainability remains a challenge. We strive to ensure transparency around the capabilities and limitations of our AI models. Our approach includes clear documentation of model behaviors, potential biases, and providing insights into the factors influencing model outputs to the extent possible.

Our AI model auto-completes and writes texts based on user prompts. The users (eg - qualified legal professionals) can change the text, override our AI system and regularly review the outputs of our AI system. We also run onboarding calls and training sessions for our users to ensure they use the product in the best way.

Solve Intelligence conducts internal tests on bias and disparate impact of the model. Bias testing is conducted semi-annually or with each major update to the model. Disparate impact analyses are conducted annually or with each major update to the model.

Solve Intelligence uses a combination of automated and human review to ensure no protected data is included in training datasets.

The model does not use any protected characteristics (eg - biometric, personal health data, race, gender) in its training data.

Solve Intelligence does not collect any identity-related data.

We do not use any biometric data in our training data

To safeguard against training data poisoning, we employ strict data validation, source verification, and continuous monitoring practices. Our data ingestion pipeline includes multiple layers of checks to ensure integrity and authenticity of the training data, preventing malicious alterations designed to bias or degrade model performance.

We implement comprehensive security measures to protect against malicious prompts, including input validation, behavior analysis, and constant monitoring of AI interactions. Our systems are designed to detect and mitigate potential threats or unusual patterns of activity, ensuring that our AI models respond appropriately to all inputs.

The company requires authentication to systems and applications to use unique username and password or authorized Secure Socket Shell (SSH) keys. Access to information computing resources is limited to personnel with a business requirement for such access.

See our Access Controls Policy.

Angus Parsonson, co-founder and CTO of Solve Intelligence, is responsible for the oversight of Cyber-Risk and internal control for information security, privacy, and compliance.

Our robust data and security policies prevent against such unauthorized access.

If a Solve Intelligence employee, contractor, user, or customer becomes aware of an information security event or incident, possible incident, imminent incident, unauthorized access, policy violation, security weakness, or suspicious activity, then they shall immediately report the information using one of the following communication channels: Email our support with information or reports about the event or incident.

For critical issues, the response team will follow an iterative response process designed to investigate, contain exploitation, eradicate the threat, recover system and services, remediate vulnerabilities, and document a post-mortem report including the lessons learned from the incident.

See our Incident Response Policy.

We use 3rd party tools for performance monitoring, development and security of our AI systems.

We frequently conduct internal audits and checks to ensure we are conforming with ISO 42001 standards.

We have conducted 3rd party audits for SOC2. We have not conducted any third party audits for our AI system yet.

We require our third-party AI providers to use the information only for the purpose of facilitating the Solve Intelligence tool, and we do not allow these providers to train their AI models using personal information.

Solve Intelligence has documented a policy for the development or use of AI systems.

Other standards, policies and documents such as SOC2, data protection, data retention, incident management, risk management and information security policy apply to our AI policy objectives.

Solve Intelligence reviews the AI policy every 6 months to ensure suitability, adequacy and effectiveness.

Solve Intelligence has established defined roles and responsibilities to oversee the design and safety of the AI system.

Solve Intelligence has defined and put in place a process to report concerns about the organization's role with respect to an AI system throughout its life cycle.

Solve Intelligence has documented relevant resources required for the activities at given AI system life cycle stages.

Solve Intelligence has documented information about the data resources utilized for the AI system. Solve Intelligence primarily collects data from internal company documents (eg - patent, legal documentation) user prompts, and public patent data. Solve Intelligence does not share any PII data with our third-party LLM providers. We require our third-party AI providers to use the information only for the purpose of facilitating the Solve Intelligence tool, and we do not allow these providers to train their AI models using personal information. We have a zero data retention agreement with our LLM provider.

Solve Intelligence has documented information about the tooling resources utilized for the AI system.

Solve Intelligence has documented information about the system and computing resources utilized for the AI system.

Solve Intelligence uses highly qualified data scientists and engineers to operate and implement the AI system. Our Information Security Officer is responsible for the development, review and evaluation of the AI policy.

Solve Intelligence has established a process to assess the potential consequences for individuals or groups of individuals, or both, and societies that can result from the AI system throughout its life cycle. We frequently monitor for risks related to security, bias, fairness, accuracy.

Solve Intelligence documents and assesses the AI impact assessment every 6 months and retains the report indefinitely.

Solve Intelligence frequently monitors for risks related to security, bias, fairness, accuracy related to its AI model and system.

Solve Intelligence's AI solution does not make any decisions related to hiring or firing, access to healthcare services, health benefits, health insurance, access to financial, services such as loans, grants, insurance and investments nor does it impact the the legal position or life opportunities of individuals; the physical or psychological well-being of individuals or universal human rights

Solve Intelligence has documented objectives to guide the responsible development AI systems, and taken those objectives into account in the development life cycle.

Solve Intelligence has documented the specific processes for the responsible design and development of the AI system.

Solve Intelligence has documented requirements for new AI systems or material enhancements to existing systems.

Solve Intelligence has documented the AI system design and development along the lines of organizational objectives, documented requirements and specification criteria.

Solve Intelligence has documented verification and validation measures for the AI system and specify criteria for their use.

Solve Intelligence has documented a deployment plan and ensure that appropriate requirements are met prior to deployment related to performance monitoring and evaluation. Major code, system and changes to the AI system typically reviewed by the managers in the company.

Solve Intelligence has documented the necessary elements for the ongoing operation of the AI system such as system and performance monitoring, repairs, updates and support.

Solve Intelligence has documented the AI system technical documentation is needed for interested parties, such as users, partners, supervisory authorities.

Solve Intelligence frequently collect and records detailed logs for our AI systems. We collect logs (eg - event logs recording user activities, exceptions, faults and information security events) on a weekly basis to monitor any incidents and security risks.

Solve Intelligence has documented and implement data management processes related to the security, privacy, evaluation, accuracy and development of AI systems.

Solve Intelligence has documented details about the acquisition and selection of the data used in AI systems.

Solve Intelligence has defined and documented requirements for data quality and ensures that data used to develop and operate the AI system meet those requirements.

Solve Intelligence has defined and documented a process for recording the provenance of data used in its AI systems over the life cycles of the data and the AI system.

Solve Intelligence defined and documented its criteria for selecting data preparations and the data preparation methods to be used.

Solve Intelligence has determined and provided the necessary information to users of the AI system.

Solve Intelligence has provided capabilities for interested parties to report adverse impacts of the AI system.

Solve Intelligence has determined and document a plan for communicating incidents to users of the AI system.

Solve Intelligence has determined and documented its obligations to reporting information about the AI system to interested parties.

Solve Intelligence has defined and documented the processes for the responsible use of AI systems.

Solve Intelligence has identified and documented objectives to guide the responsible use of AI systems.

Solve Intelligence ensures that the AI system is used according to the intended uses of the AI system and its accompanying documentation.

Solve Intelligence assesses risk associated with suppliers and the technology supply chain. We do not share any PII data with 3rd party AI providers such as 3rd party LLMs.

Solve Intelligence has an established process to ensure that its usage of services, products or materials provided by 3rd party AI suppliers aligns with our approach to the responsible development and use of AI systems. We carefully review the security and risk policies while buying from suppliers.

Solve Intelligence ensures that its responsible approach to the development and use of AI systems considers their customer expectations and needs.