Responsible AI Policy

Last updated: 08/09/2026

Purpose

Nairo is an AI-powered workspace for professional and enterprise teams. It supports research, document analysis, collaboration, knowledge retrieval, and AI-assisted operations.

This Responsible AI Policy explains how Nairo develops, deploys, and operates artificial intelligence features in a responsible, secure, and human-centered way.

Nairo's AI features are designed to assist users and organizations. They are not intended to replace professional judgment, human review, or accountable decision-making.

This Policy applies to Nairo's artificial intelligence features, assistants, copilots, agents, research capabilities, document analysis tools, automation features, and related platform functionality.

Our approach to responsible AI

Nairo's approach to responsible AI is guided by the following principles:

Human oversight. AI should support, not replace, human judgment.
Accountability. Customers and users remain responsible for decisions made using AI-assisted outputs.
Security and privacy. Customer data should be handled with appropriate safeguards.
Transparency. Users should understand the role and limitations of AI-generated outputs.
Reliability and review. AI outputs should be reviewed before being relied upon.
Fairness and bias awareness. AI systems may produce biased, incomplete, or inappropriate results and should be used with appropriate controls.
Responsible use in professional workflows. AI should be used carefully in regulated, sensitive, or high-impact contexts.

Nairo is designed for professional environments where trust, review, and governance are essential.

Human oversight and professional judgment

Nairo's AI features are intended to assist users with research, analysis, summarization, extraction, drafting, comparison, and operational workflows.

AI-generated outputs may help accelerate work, surface information, structure analysis, or support decision-making. They should not be treated as final, authoritative, or independently verified conclusions.

Customers and users are responsible for:

reviewing and validating AI-generated outputs;
applying appropriate professional judgment;
confirming the accuracy and completeness of information before relying on it;
maintaining appropriate internal governance, review, and approval processes; and
ensuring that AI-assisted workflows comply with applicable laws, regulations, policies, and professional standards.

Nairo should not be used as the sole basis for decisions that may materially affect individuals, legal rights, insurance coverage, underwriting determinations, financial outcomes, regulatory obligations, employment decisions, or other high-impact outcomes without appropriate human review and oversight.

Accuracy, reliability, and limitations

Artificial intelligence systems are probabilistic. They may generate outputs that are inaccurate, incomplete, outdated, inconsistent, biased, or unsuitable for a particular use case.

Nairo does not guarantee that AI-generated outputs will be accurate, complete, reliable, current, or appropriate for any specific purpose.

AI-generated outputs may include:

factual errors;
outdated information;
incorrect assumptions;
missing context;
hallucinated references or reasoning;
incomplete analysis;
biased or uneven treatment of information;
incorrect summaries or extractions; or
outputs that require further review by qualified professionals.

Users should independently verify outputs before relying on them, especially in professional, regulated, legal, financial, compliance, insurance, underwriting, claims, or operational contexts. See also our AI Disclaimer.

Responsible use in regulated and professional workflows

Nairo may be used in workflows involving insurance, legal, compliance, operational, financial, risk, claims, underwriting, research, or other professional activities.

These contexts often require careful review, auditability, regulatory awareness, and accountability.

Customers are responsible for determining whether Nairo is appropriate for their intended use cases, and for implementing suitable controls around the use of AI-generated outputs.

Such controls may include:

human review before decisions are made;
escalation processes for sensitive matters;
internal approval workflows;
validation against source documents;
review by qualified professionals;
compliance checks;
documented decision-making processes; and
restrictions on use in high-risk scenarios.

Nairo is not intended to provide legal, regulatory, underwriting, financial, medical, tax, accounting, or other professional advice.

Data protection and privacy

Nairo is designed with customer data protection and privacy in mind.

Nairo does not use Customer Data, including uploaded documents, prompts, outputs, workspace content, or AI interactions, to train public or shared artificial intelligence models.

Where third-party AI providers are used as part of the platform infrastructure, Nairo seeks to use providers that offer contractual commitments intended to restrict the use of Customer Data for public or shared model training purposes.

Nairo seeks to implement appropriate technical and organizational measures to protect customer information, including access controls, encryption, authentication, infrastructure monitoring, and internal confidentiality practices.

Additional information about Nairo's handling of personal data and customer data is available in our Privacy Notice, Product Terms, Trust and Security documentation, and Subprocessors List.

Security and AI system safeguards

Nairo seeks to implement technical and operational measures intended to support the secure use of AI systems within the platform.

These measures may include:

workspace-based access controls;
role-based permissions;
controlled access boundaries for AI-assisted workflows;
safeguards intended to reduce prompt injection and malicious inputs;
restrictions designed to reduce unauthorized exposure of customer information;
monitoring and operational controls intended to detect misuse or abuse;
controlled integration with third-party AI providers; and
human-review-oriented workflow design.

Nairo continuously evaluates its AI-related security practices as the platform, models, customer requirements, and regulatory environment evolve.

Fairness and bias awareness

AI systems may reflect limitations, gaps, or biases present in training data, user inputs, model behavior, or system design.

Nairo seeks to support responsible use of AI by encouraging human review, professional judgment, and appropriate customer governance over AI-assisted workflows.

Customers and users should be aware that AI-generated outputs may:

reflect biased or incomplete assumptions;
produce uneven results across different groups, contexts, or data sources;
fail to identify relevant nuances;
overstate confidence;
omit important context; or
generate outputs that require correction, review, or escalation.

Users should take particular care when using AI-generated outputs in contexts involving individuals, employment, insurance coverage, claims, underwriting, compliance, legal rights, financial outcomes, or other sensitive or high-impact matters.

Transparency and explainability

Nairo aims to make AI-assisted workflows understandable and usable in professional environments.

Where appropriate, Nairo may support features such as citations, source references, document grounding, traceability, workspace context, or structured outputs to help users assess AI-generated results.

AI-generated outputs may not always provide complete reasoning, full explainability, or perfect traceability to underlying sources.

Users should review available sources, underlying documents, citations, and context before relying on AI-generated outputs.

Nairo encourages customers to establish internal policies regarding when and how AI-generated outputs may be used, reviewed, shared, or incorporated into business processes.

Misuse prevention

Nairo's AI features must be used responsibly and in accordance with Nairo's Acceptable Use Policy, Product Terms, applicable customer agreements, and applicable laws.

Users may not use Nairo to:

engage in unlawful, harmful, fraudulent, abusive, or deceptive activity;
generate or distribute malicious code, phishing content, or harmful instructions;
infringe intellectual property, privacy, confidentiality, or third-party rights;
conduct unauthorized surveillance, profiling, scraping, or data extraction;
make fully autonomous high-impact decisions without appropriate human oversight;
generate discriminatory, hateful, exploitative, or abusive content;
attempt to reverse engineer, extract, or misuse underlying models, prompts, systems, or platform components; or
use AI outputs in a way that violates applicable laws, regulations, professional obligations, or customer policies.

Nairo may suspend, restrict, or terminate access to the Services where necessary to protect the platform, users, customers, third parties, or the lawful operation of the Services.

Customer responsibilities

Responsible AI use is a shared responsibility between Nairo and its customers.

Nairo provides tools, infrastructure, controls, and platform capabilities intended to support responsible AI-assisted workflows.

Customers remain responsible for:

determining appropriate use cases;
configuring user access and permissions;
managing internal governance and review processes;
ensuring users understand AI limitations;
validating outputs before reliance;
complying with applicable laws and regulations;
maintaining professional accountability for decisions; and
ensuring that uploaded data, documents, prompts, and content may lawfully be processed through the platform.

Customers should consider adopting internal AI usage guidelines for their organization, particularly where Nairo is used in regulated, sensitive, or high-impact workflows.

Third-party AI providers

Nairo may use third-party AI providers, model infrastructure providers, or related technologies to deliver certain AI-powered features.

Nairo seeks to evaluate AI providers based on factors such as:

security practices;
operational reliability;
enterprise suitability;
privacy commitments;
model performance;
safety considerations; and
contractual safeguards relating to customer data handling.

Nairo may update, replace, or add AI providers over time as technologies, security requirements, customer needs, and platform capabilities evolve.

Additional information regarding subprocessors and third-party providers is available in our Subprocessors List and applicable customer documentation.

Continuous improvement

Responsible AI is an evolving area. Nairo's approach may change over time as AI technologies, laws, regulations, customer expectations, and best practices develop.

Nairo seeks to continuously evaluate and improve its AI-related practices, including:

security controls;
provider governance;
data protection safeguards;
product design;
user guidance;
misuse prevention;
human oversight mechanisms; and
documentation and transparency.

Nairo may update this Responsible AI Policy from time to time to reflect changes in the platform, AI capabilities, regulatory requirements, industry standards, or operational practices.

The "Last updated" date at the top of this Policy indicates when the latest version became effective.

Contact

If you have questions regarding this Responsible AI Policy or Nairo's approach to responsible AI, please contact:

People Future S.L.
Commercial name: Nairo
Calle San Germán 10, 4G
28020 Madrid, Spain
Email: legal@nairobilabs.com
Website: https://nairobilabs.com