Use of AI

Purpose and scope

Nora Comply uses artificial intelligence (AI) responsibly, transparently and in line with applicable law, including the GDPR and the EU AI Act. This policy explains to our customers, partners and website visitors how AI is used in our services, on noracomply.com and in our business operations.

How we use AI

We use AI tools to support, not replace, the work of our people. We do not use AI to make decisions that have legal or similarly significant effects on individuals without meaningful human involvement. We do not use AI for any practice prohibited under Article 5 of the EU AI Act. Where you interact directly with an AI system, such as a chatbot, we will tell you. We also disclose any AI generated images.

Human oversight

A sufficiently AI literate person reviews AI-assisted output before it is relied on or delivered to a client. Our staff remain accountable for the accuracy and quality of all advice and deliverables. We train our team on the appropriate use of AI and on its limitations.

EU AI Act compliance

We use NoraLite to make sure our use of AI is in line with the requirements of the EU AI Act. NoraLite helps us assess the AI systems we use, track our obligations under the Act and keep our compliance up to date as the rules evolve.

Data and privacy

We only use AI tools that meet our security and data protection standards. In particular:

• We do not enter client confidential or personal data into public AI tools that use inputs for model training
• We use enterprise or business versions of AI tools with appropriate contractual protections
• Any processing of personal data through AI follows our Privacy Policy and the GDPR

Limitations, updates and contact

AI can produce errors or incomplete results, which is why human review is central to our approach. We review this policy at least once a year and update it as technology and regulation evolve.

Questions about our use of AI can be sent to kathryn@noracomply.com or emily@noracomply.com.