Grassfeld - Artificial Intelligence Policy
This policy on Artificial Intelligence (AI) describes the relevant measures taken by Grassfeld B.V. (‘Grassfeld’) in relation to AI from both strategic and operational perspectives.
Last updated on 09-09-2024
EU-EN-V1.1.0
This policy applies to users of Grassfeld's application and website. Grassfeld uses advanced AI technologies to provide an enhanced and more personalized user experience.
This policy is designed to inform you about how we deploy AI within our application, what responsibilities you have as a user, and how we handle your data. The policy has been drafted with a strong focus on advanced AI technologies to meet the highest cybersecurity practices and standards. This includes specific reference to relevant ISO standards, including ISO/IEC27001, ISO/IEC42001 to ensure compliance and security.
1.
Use of AI within the application
Within the application, Grassfeld uses two main AI systems to enhance your experience:
1.
AI for Transaction Categorization and Analysis:
This AI helps automatically organize and categorize your transactions. Where previously transactions had to be manually annotated, this AI ensures that, for example, a transaction at “Supermarket A” is automatically placed under categories such as “groceries” or location “Amsterdam. The AI also recognizes recurring payments that are frequent enough to be classified as such and alerts you to unusual transactions through a tip.
1.2
AI for Comparison and Tips:
This AI compares the cost of fixed and variable expenses with current costs in the market. If wished for, specifically from your own area and gives you suggestions on how you can spend more efficiently and economically. This transactional behavior is completely anonymous, and the data cannot be traced back to you. These suggestions are not binding advice, but only serve as helpful hints. Keep in mind that this AI will be in beta phase in 2024 and 2025.
2.
Ethical principles
As developers of AI, we, at Grassfeld, are aware of the ethical issues associated with its use. Therefore, we employ seven core principles that highlight these ethical considerations.
These principles are closely aligned with fundamental rights and reflect important ethical concerns when using AI.
- We ensure that human autonomy and oversight are central, with a strong emphasis on respecting fundamental rights.
- We ensure that our systems are technically robust and secure, with comprehensive attack protection, security protocols, contingency plans, and an overall focus on safety, accuracy, reliability, and reproducibility.
- We ensure that privacy and data management are handled with the highest care, respecting privacy, ensuring data quality and integrity, and responsibly managing access to that data.
- We ensure that we value transparency, through traceability, explainability and clear communication of our processes and decisions.
- We ensure that diversity, non-discrimination and equity are promoted, by avoiding unfair prejudice, ensuring accessibility and universal design, and encouraging the participation of all stakeholders.
- We ensure that our work contributes to social and environmental well-being, focusing on sustainability, environmental soundness, social impact, and supporting society and democracy.
- We ensure that we take accountability seriously, providing opportunities for audit, minimizing and reporting negative impacts, carefully balancing interests, and providing remediation when necessary.
3.
Privacy and data management
Grassfeld maintains a strict Privacy and Cookie Policy with your data always remaining within our organization. Your data will not be sold or transferred to third parties. Our AI systems run on our own servers, and all testing and production work takes place internally. This means that your data is safe and only used by us to optimize the services we offer.
4.
User responsibilities
As a user, you are responsible for the data you provide to the application. Grassfeld has no direct access to your data. All information entered by you will remain private and controlled solely by you. When you choose to delete your account, all associated data is also deleted from our system. Any residual data that may remain in our learning mechanisms (LM) cannot be traced back to an individual.
5.
Privacy by Design and Security by Design
Grassfeld applies the principle of “Privacy by Design” and “Security by Design”, which means that from the beginning of the development of our services we put the protection of your privacy and information security at the center. To use the application, only basic information is required, such as your login details. Any additional information is optional and can be added at your discretion.
6.
Premium services
Grassfeld offers a premium option where you can store documents and transactions without that data being used for data training. This option is designed specifically for users who want to maintain maximum control over their data. Smart technology (intelligence) will be added in the future. Premium customers will have the ability to automatically link transactions to documents and vice versa. Consider, for example, transactions automatically linked to a policy.
7.
Incident management
Security measures are proactively integrated into Grassfeld's design. Cyberpartner MMOX receives threat information from a variety of sources. In the event of an incident, Grassfeld immediately escalates to the core team, isolates affected systems and conducts forensic investigations. A 24/7 cyber team communicates according to laws and regulations. Further information can be found in the Security Policy.
8.
Compliance and legislation
Grassfeld operates in compliance with the requirements of applicable data protection laws.Information about Grassfeld's compliance with legal and information security issues is covered in the Privacy and Cookie Policy and Security Policy.
9.
Policy updates
This policy may be updated at any time to reflect legal, technical or business changes. We encourage you to check this statement regularly to stay informed of any updates.
This policy provides clear information about how we use AI to improve our services and what measures we take to safeguard your privacy.Your trust is important to us, and we are committed to maintaining it.