AI Use Policy

This AI Use Policy explains how SourceTrust ("we", "us") uses artificial intelligence (AI) systems in connection with our services at https://sourcetrust.dev and https://app.sourcetrust.dev. It is intended to provide transparent information to users, customers, and other stakeholders about our use of AI.

This policy does not create additional contractual rights or obligations beyond those in our Terms of Service, Data Processing Agreement, or privacy policy.

In this policy, "AI systems" means software that uses machine learning, large language models, or similar techniques to perform tasks such as:

• Generating, summarising, or transforming text or other content;
• Classifying, extracting, or structuring data;
• Assisting in decision support or automation of workflows.

We use AI systems in the following ways:

We use AI systems:

• To assist our engineering and product teams with tasks such as code suggestions, test generation, documentation, and internal analysis.
• To support operational tasks such as monitoring, anomaly detection, and internal reporting.

We use AI systems:

• To process user data in order to provide specific features of our service, such as AI-assisted classification of license and notice text extracted from imported software artifacts.
• To transform or structure data provided by users or collected from connected sources (for example repositories, APIs, and files) in order to generate classified license identifiers and related outputs within the product.

We do not use AI systems to infer users' emotions, mental states, or to categorise individuals based on biometric data.

Regarding AI-assisted features:

• We remain responsible for the services we provide, including any outputs produced with the help of AI.
• Where appropriate, we apply human review, testing, and quality controls to AI-assisted features, especially where outputs may affect user decisions or compliance-related processes.
• We do not present AI-generated outputs as human-authored where this would be misleading in the context of our service.

Regarding data processed by AI systems:

• AI systems used in our service process data in accordance with our privacy policy and any applicable Data Processing Agreements.
• We do not use customer data to train general-purpose AI models unless explicitly agreed in writing (for example, via a DPA or specific addendum).
• Where we use third-party AI providers, we configure them, where possible, to avoid using customer data for model training or improvement beyond what is necessary to provide the service.

AI systems can make mistakes. Outputs generated with the help of AI may be incomplete, inaccurate, or unsuitable for certain purposes. Accordingly:

• Users should apply appropriate professional judgement before relying on AI-assisted outputs, especially for legal, financial, compliance, or other high-stakes decisions.
• We provide AI-assisted features on an "as is" basis, subject to the disclaimers and limitations of liability in our Terms of Service.

We may update this AI Use Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page will be updated when changes are made. Material changes will be communicated via our product, email, or other reasonable means.

If you have questions about our use of AI, you can contact us at:

SourceTrust

hello@sourcetrust.dev