Generative AI Policy

Effective Date: 1/1/2025

  1. Introduction
    At TIER1, we are committed to protecting the privacy and security of our clients’ information. This Privacy Policy outlines how we collect, use, and protect personal data when providing consulting services that involve the use of Generative AI technologies.
  2. Data Collection
    We collect and use only the data necessary for generating insights, recommendations, or content through AI models. This includes:

    • Client-Provided Data: Information provided to us for the purpose of project delivery or analysis.
    • Generated Data: Outputs generated by AI models based on input data.
  3. Data Usage
    We use Generative AI models strictly to provide consulting services. The usage of AI may include, but is not limited to:

    • Data analysis and report generation.
    • Automated content creation, such as drafts or recommendations.
    • Scenario simulations and predictive insights.
    • Training content and associated training deliverables.
  4. No Use of Client Data for AI Training
    We do not use any client data, whether identifiable or anonymized, to train or improve our AI models unless explicitly agreed upon in a written contract with the client. All AI models deployed in our consulting services are pre-trained or use publicly available datasets, ensuring that no proprietary or sensitive client data is incorporated into any model training processes.
  5. Data Confidentiality & Security
    TiER1 is SOC2 certified and attests to its GDPR compliance. All client data is handled with the highest standards of confidentiality. We implement industry-standard security measures to protect data against unauthorized access, loss, or misuse. These measures include:

    • Access Control: Restricted access to client data based on the principle of least privilege.
    • Encryption: Encryption of sensitive data during storage and transmission.
    • Audits and Monitoring: Regular audits and real-time monitoring to ensure compliance and data integrity.
  6. Data Sharing and Third Parties
    We do not share, sell, or disclose client data with third parties unless required by law or with prior client consent. If external Generative AI services or third-party tools are used, we ensure that:

    • Third parties comply with our security and privacy standards.
    • Data is anonymized or aggregated wherever possible.
    • Client consent is obtained for any substantial data sharing.
  7. Anonymization and Data Minimization
    We employ techniques to anonymize or pseudonymize data wherever feasible. Additionally, we adhere to a data minimization principle, ensuring that only the minimum necessary data is used for Generative AI tasks.
  8. Client Rights
    Clients have the following rights concerning their data:

    • Access: Clients may request details on the personal data we hold and how it’s used.
    • Correction: Clients may request corrections to inaccurate data.
    • Erasure: Clients can request the deletion of their data unless required for legitimate purposes.
  9. AI Transparency and Accountability
    We are committed to maintaining transparency about the use of Generative AI in our consulting services. Our clients are informed about:

    • The types of AI models used and their limitations.
    • Whether AI-generated insights or recommendations are machine-generated or human-reviewed.
    • Potential biases in AI models and mitigation steps taken.
  10. Data Retention
    Client data is retained only for as long as needed to fulfill the purposes for which it was collected or to comply with legal, accounting, or reporting requirements. Once no longer required, data is securely deleted or anonymized.
  11. Policy Changes
    We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. Any significant updates will be communicated to our clients, and the revised policy will be published on our website.
  12. Contact Information
    If you have any questions about this Privacy Policy or your personal data, please contact us at:
    TiER1 Impact, LLC
    Eric Lodor, Director of Infrastructure and Security
    100 River Center Blvd. East, Covington, KY 41011
    e.lodor@tier1performance.com