AI and data security.

Our AI capabilities are designed to support research, analysis and professional judgement. They are not intended to replace human accountability or make solely automated, high-impact decisions about individuals.

How TSC.ai uses AI

TSC.ai combines structured data, rules-based processing, machine learning, retrieval and generative AI across selected product and service capabilities. Depending on the capability and customer configuration, AI may be used to:

• Retrieve and summarise relevant information
• Support research and drafting
• Classify and enrich media or stakeholder information
• Identify patterns, relevance and sentiment
• Help users navigate authorised information more efficiently

The data available to an AI-enabled capability depends on the service, the customer's configuration, the sources enabled for that environment and the requesting user's permissions.

Customer data and model training

TSC.ai does not use customer prompts, inputs, outputs or confidential customer information to train shared TSC.ai generative models or general-purpose models.

Customer data may be processed to provide, secure, operate, troubleshoot and support the requested service. This operational processing is different from using data to train a model. Retention and processing arrangements are governed by the relevant service configuration, customer agreement and approved provider terms.

If TSC.ai were to propose using customer data for a separate model-training purpose, that use would require an explicit agreement with the customer.

Authorised and scoped access

AI-enabled features operate within the applicable TSC.ai product and access-control framework. Information made available to an AI capability is governed by the relevant customer environment, enabled data sources, feature configuration and user permissions.

TSC.ai applies access-management and data-scoping measures intended to prevent users or AI-enabled features from accessing information outside their authorised context. Customers should apply appropriate user permissions, data-minimisation practices and internal governance when deciding which information and capabilities to enable.

Third-party AI services

TSC.ai uses approved third-party technology providers for selected AI capabilities and also operates internally deployed machine-learning services.

Third-party services are assessed and managed through applicable supplier, security, privacy and contractual processes. The provider and processing path used may vary by capability, deployment and agreed customer configuration. Provider-specific details, including data-processing and assurance information, are available to customers and prospective customers through TSC.ai's security and privacy diligence process.

Security and privacy safeguards

TSC.ai applies safeguards appropriate to the service and risk, including measures in the following areas:

• Authenticated access and permission management
• Customer and workspace data scoping
• Encryption and secure handling of credentials
• Controlled access to systems and data
• Logging, monitoring and operational oversight
• Secure development, testing and change-management practices
• Review of relevant third-party services and data-processing arrangements

The specific implementation of these safeguards may vary by service, deployment, configuration and customer agreement. Detailed security architecture, control evidence and customer-specific processing information are provided through controlled diligence rather than on this public page.

For how TSC.ai handles personal data more generally, please see our privacy note.

Reliability, grounding and transparency

Generative AI can produce information that is incomplete, inaccurate or inappropriate for a particular context. TSC.ai uses capability-appropriate measures intended to reduce this risk. These may include retrieval from authorised sources, source references where supported, constrained workflows, validation, error handling and human review.

These measures reduce risk but do not guarantee that every AI-generated output will be complete or correct. Users should review material outputs and, where available, the underlying sources before relying on them for decisions or external communications.

Human judgement and accountability

TSC.ai's AI capabilities are designed as decision-support tools.

In interactive product experiences, AI-generated responses may be shown directly to an authorised user without prior review by a TSC.ai team member. The user remains responsible for reviewing the output before relying on it for a material or consequential purpose.

Where TSC.ai uses AI to assist with a managed customer deliverable, the material is reviewed by an accountable TSC.ai team member before external delivery, in accordance with the applicable service process.

Customer configuration and governance

Available AI capabilities and controls can vary by service and customer configuration. TSC.ai works with customers to assess relevant access, data-source, feature and governance requirements during implementation and ongoing service review.

Customers with specific requirements concerning data categories, enabled AI capabilities, provider use, processing arrangements or review workflows should raise them through the implementation or security-review process, so that the appropriate controls and contractual terms can be assessed.

Further information

This page is a high-level overview. It is not an exhaustive technical specification, security assurance report, privacy notice or contractual commitment. Customer agreements and applicable data-processing terms govern the services provided to each customer.

TSC.ai provides additional security, privacy, AI-governance and processing information to customers and prospective customers through its diligence process, subject to suitable confidentiality arrangements.

For general enquiries or to request further diligence information, contact info@tsc.ai.