Responsible AI Statement

AROXOS is designed to help organizations operationalize privacy, security and responsible-AI controls in support of their applicable obligations, including the GDPR and EU AI Act. Exact requirements depend on the organization's role, use case, sector, data, jurisdiction and deployment configuration. AROXOS does not replace legal counsel, the DPO or the organization's own accountability, and no technology platform alone guarantees compliance.

Governance principles

• Client-Controlled Autonomy

  Define what AI may observe, recommend, draft, execute with approval or execute within explicit boundaries.

• Privacy-Aware Data Governance

  Support purpose and consent records, data minimization, configurable retention, controlled access, correction, export and deletion workflows.

• Meaningful Human Oversight

  Sensitive or high-impact actions remain reviewable, stoppable, correctable and overridable.

• Traceability and Evidence

  Preserve source, context, policy, model version, recommendation, approval, override, action, result and writeback status.

• Risk-Based AI Governance

  Maintain an inventory of AI systems and use cases, assign owners, classify risk, manage approved models and vendors, monitor performance and escalate incidents.

• AI Literacy and Responsible Adoption

  Give every role the context, guidance and learning required to use AI appropriately. Track responsible adoption without encouraging careless automation.

EU AI Act — designed to help operationalize

• · AI system and use-case inventory
• · Provider/deployer responsibility mapping
• · Risk classification
• · Prohibited-use guardrails
• · Transparency when people interact with AI
• · AI identity disclosure where applicable
• · Synthetic-content marking where applicable
• · Human oversight
• · Meaningful override
• · Logging
• · Traceability
• · Technical and operational documentation
• · Model and vendor governance
• · Data-quality monitoring
• · Performance monitoring
• · Robustness and cybersecurity controls
• · Incident escalation
• · AI literacy initiatives and records
• · Impact-assessment support where applicable
• · Post-deployment monitoring
• · Corrective action

Official sources

• European Commission — AI Act overview
• Consolidated EU AI Act (EUR-Lex)
• AI Act Article 50 transparency guidance
• European Commission — data protection by design and by default
• EDPB Guidelines 4/2019 on Article 25

No certification is claimed on this website. Specific security controls are published only after confirmation by the AROXOS technical team. Questions can be submitted through the briefing request form on the AROXOS home page.