AI transparency notice
This tool uses AI
CRA PROCESS includes an AI assistant. You are interacting with an AI system whenever you use it, and the text it produces is machine-generated. This page states plainly what the AI is used for, so the disclosure duty in Article 50 of Regulation (EU) 2024/1689 (the EU AI Act) is met — informing users that they are interacting with an AI system and marking AI-generated content as such.
Use
Where AI is used in this app
- Clause explanations — plain-language explanations of a clause you have opened.
- Assistant chat — answers to questions you type about the selected clause.
- Task suggestions — proposed to-do items you choose to accept or discard.
- Output drafts — first drafts of documents and records listed as clause outputs.
- Report summary — the executive summary in the exported compliance report.
AI is only invoked when you explicitly press an AI action or send a message. Nothing is generated in the background.
Limits
What the AI does not do
- It makes no automated decisions about you, your product or your compliance status. It never marks a clause or criterion as fulfilled — a person does that.
- It does no profiling, scoring or evaluation of people, and it is not used for emotion recognition or biometric categorisation.
- Your content is not used to train models.
- It does not give legal, certification or conformity-assessment advice, and it cannot replace a notified body or your own technical judgement.
Marking
How AI output is identifiable
Every AI surface in the app carries a visible notice, assistant replies are labelled as coming from the AI system, and suggested tasks and drafts are marked AI-generated until you edit and accept them.
In the exported PDF report, the summary section is explicitly stated to be generated by an AI system and reviewed by your project team, so an auditor can distinguish it from text you authored.
Processing
Where the text goes
When you use an AI action, the relevant clause context and your prompt are sent to a third-party model provider through the platform's AI gateway so a response can be generated. Only that text is transmitted — not your account data or other projects.
Avoid pasting secrets or personal data you do not need to share. See Security & GDPR for hosting, encryption and data-subject rights.
Review
Human oversight is yours
Treat every AI output as a draft. You remain responsible for the accuracy of your compliance record: read, correct and confirm generated text before it becomes evidence, and keep the underlying documents as the source of truth.
Contact
Questions about AI use
Ask us anything about how AI is used in this tool: conny@ithing.se.
This page is maintained by iThing AB to describe how AI is used in CRA PROCESS. It is a transparency notice, not legal advice or a certification.