GenAI Usage Policy

‍Klarity Intelligence, Inc.

‍Policy Owner: Nischal Nadhamuni

‍Effective Date: October 22, 2024

‍

1. Purpose

‍This policy ensures that Klarity Intelligence, Inc. (“ Klarity ”) usage of GenAI models protects the security and confidentiality of customer data while also delivering stability and scalability.

Klarity offers GenAI-based features through a number of software vendors (each, a “ GenAI Provider ”) such as Microsoft and OpenAI.

Regardless of the GenAI Provider, your data will not be used as training data for current or future AI models.

‍

2. Our GenAI Providers

a. Microsoft

‍Microsoft Corporation (“ Microsoft ”) is a U.S. technology company that develops and sells a variety of enterprise and consumer technology products. Klarity has conducted a privacy and security assessment of Microsoft to verify its policies and procedures are appropriate for access to customer data. More information about security and privacy at Microsoft Azure is available here.

b. OpenAI

‍OpenAI, L.P. (“ OpenAI ”) is a U.S. company that conducts research and deployment of artificial intelligence models. Klarity has conducted a privacy and security assessment of OpenAI to verify its policies and procedures are appropriate for access to customer data. More information about security and privacy at OpenAI is available here.

c. Google

‍Google LLC (“ Google ”) is a U.S. company that conducts research and deployment of artificial intelligence models. Klarity has conducted a privacy and security assessment of Google to verify its policies and procedures are appropriate for access to customer data. More information about security and privacy at Google is available here.

d. Anthropic

‍Anthropic PBC (“ Anthropic ”) is a U.S. company that conducts research and deployment of artificial intelligence models. Klarity has conducted a privacy and security assessment of Anthropic to verify its policies and procedures are appropriate for access to customer data. More information about security and privacy at Anthropic is available here.

‍

3. How Klarity Uses GenAI Models

‍Klarity uses GenAI models to enhance its core NLP platform for automating document workflows. In addition to improving the speed and accuracy of the existing Klarity features, it powers generation of new AI-powered features within Klarity such as Chat, Search and many others. GenAI Providers may perform the following activities with respect to data:

• Processing document data to perform extractions, - Matching data between checklist items,
• Compute embeddings from document data,
• Interact with users in a chat interface,
• Other activities in accordance with the agreement between your organization and Klarity.

Please refer to the architecture diagram below for more information.

4. Personal Data Processing

‍Klarity sends document data to GenAI Providers for processing. In addition, Klarity may send other field values from third party systems (such as Salesforce) if your use case requires it. This may include the following categories of personal data:

• First and last name,
• Contact information (telephone number & email address),
• Company, position,
• Other personal data your organization asks Klarity to process.

All GenAI providers will process personal data in the United States.

All GenAI Providers will process personal data according to the respective data processing agreement (DPA) in place between that company and Klarity, which fully comply with General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

5. Model Training

‍No GenAI Provider will use your organization's data as training data for any GenAI models.

Microsoft data usage policy can be found here.

OpenAI data usage policy can be found here.

Anthropic data usage policy can be found here.

Google data usage policy can be found here.

6. Data Retention

‍Any data processed by a GenAI Provider will be deleted.

Klarity has negotiated and defined zero data retention policies with its GenAI Providers.

Microsoft data usage policy can be found here.

OpenAI data usage policy can be found here.

Anthropic data usage policy can be found here.

Google data usage policy can be found here.

7. Certifications and Additional Protections

‍Microsoft Azure is SOC 1 Type 2, SOC 2 Type 2, ISO 27001 and SOC 3 certified, amongst other certifications listed here.

OpenAI is SOC 2 Type 2 certified.

Google is SOC 1 Type 2, SOC 2 Type 2 and SOC 3 certified, amongst other certifications.

Klarity has non-disclosure