Trust & Compliance

Our trust principles

1. Human control by design

enzover is built around human-AI collaboration.

AI can help retrieve information, summarize input, prepare actions, suggest next steps and support workflow execution. But people remain responsible for interpretation, approval and decision-making.

Where a workflow contains uncertainty, sensitive information or business impact, enzover can include human-in-the-loop controls.

That means enzover/AI does not blindly execute everything. It pauses where human judgment matters.

2. Workflow automation, not autonomous decision-making

enzover is not designed to replace human responsibility.

Our platform is focused on operational workflow automation: reducing repetitive work, improving data quality, preparing follow-up actions and connecting business systems.

Examples include:

• preparing CRM updates after a human conversation
• summarizing meeting input into structured actions
• detecting missing or duplicate customer data
• preparing follow-up tasks
• routing information to the right system or person

enzover does not make final business, legal, financial, medical, employment or other high-impact decisions on behalf of customers unless this is explicitly scoped, reviewed and contractually agreed.

3. Privacy-first architecture

enzover is designed with European privacy expectations in mind.

We aim to help organizations use AI while maintaining control over business data, customer information and operational workflows.

Our privacy approach includes:

• processing only the data needed for the agreed workflow
• limiting access based on role and purpose
• supporting customer-controlled workflows
• avoiding unnecessary storage of sensitive information
• using appropriate technical and organizational security measures
• keeping customers responsible for the lawful use of their own data

4. Customer data remains customer data

Customer data belongs to the customer.

enzover does not sell customer data.

Customer data is used to deliver, support and improve the agreed services, in line with the agreement between enzover and the customer.

Where AI models or third-party services are used as part of a workflow, we aim to be transparent about relevant providers, processing roles and data flows.

5. Responsible AI use

enzover is intended for legitimate business workflow automation.

Our services may not be used for prohibited, unlawful or harmful AI use cases, including but not limited to:

• social scoring
• unlawful surveillance of employees or individuals
• discriminatory profiling
• manipulative or deceptive AI practices
• biometric categorization for prohibited purposes
• emotion recognition in workplace or education contexts where prohibited
• automated high-impact decisions without appropriate human review
• generation or distribution of illegal, abusive or harmful content

We reserve the right to restrict, suspend or terminate use of enzover where workflows are used in ways that violate our policies, applicable law or responsible AI principles.

AI Act Readiness Statement

enzover follows an AI Act-ready approach.

We do not claim that any AI platform can be universally “AI Act compliant” in isolation. Compliance depends on the specific use case, customer context, data, workflow design, risk classification and operational safeguards.

Our role is to provide a responsible AI workflow automation layer that helps customers implement AI in a more controlled and transparent way.

This includes:

• clear human responsibility
• workflow-level controls
• human approval steps where needed
• transparency about AI-supported output
• restrictions on prohibited use cases
• support for logging and auditability
• responsible onboarding and user guidance
• separation between AI suggestions, prepared actions and approved execution

Customers remain responsible for assessing how they use AI within their own organization, processes and legal context.

AI transparency

When AI is used in enzover workflows, we aim to make this visible and understandable.

Depending on the workflow and configuration, AI may be used to:

• understand user input
• summarize conversations or documents
• extract relevant fields
• classify information
• suggest next steps
• prepare CRM or system updates
• draft follow-up communication
• detect missing or conflicting data

AI-generated output should be reviewed by users before being used for important decisions or external communication, unless the workflow has been specifically designed and approved for automated execution.

Security and access control

enzover is designed for business environments where access, control and reliability matter.

Our security approach includes:

• role-based access principles
• limited access to customer systems
• controlled workflow execution
• separation between test and production environments where applicable
• secure handling of credentials and integrations
• monitoring of workflow behavior
• incident response procedures
• supplier and subprocessor review where relevant

Security is not only a technical matter. It is also a workflow design principle.

That is why enzover focuses on controlled execution: the right action, by the right workflow, with the right level of human oversight.

Logging and auditability

Responsible automation requires traceability.

Where supported by the workflow setup, enzover can help customers understand:

• what workflow was triggered
• what input was used
• what AI-generated output was created
• what action was proposed
• who approved or rejected an action
• what system was updated
• when the workflow ran
• where human intervention was required

This helps teams improve quality, review outcomes and maintain accountability.

AI literacy and responsible onboarding

AI works best when users understand what it can and cannot do.

enzover supports responsible onboarding by helping users understand:

• where AI is used in a workflow
• what AI output means
• when human review is required
• what data should or should not be entered
• how to handle uncertain or incorrect output
• how to escalate workflow issues

We believe responsible AI adoption is not only about technology. It is also about user understanding, process design and clear accountability.

Third-party providers and subprocessors

enzover workflows may rely on selected third-party providers, such as hosting providers, AI model providers, transcription services, CRM systems, communication platforms or integration services.

We aim to be transparent about relevant subprocessors and data flows where these are part of the customer setup.

What enzover does not do

enzover is not designed to:

• replace human judgment
• make final high-risk decisions without human review
• act as a standalone legal, financial, medical or HR decision-maker
• secretly monitor employees
• create social scores
• use customer data for unrelated purposes
• sell customer data
• function as an uncontrolled black-box automation layer

Our goal is not maximum automation at any cost.

Our goal is controlled execution of AI influencing digital work processes.

Shared responsibility

Trust and compliance are shared responsibilities.

enzover is responsible for designing, delivering and supporting responsible AI workflow automation within the agreed scope.

Customers are responsible for:

• choosing appropriate use cases
• providing lawful data
• configuring workflows responsibly
• informing users where required
• reviewing AI output where needed
• maintaining internal policies
• assessing their own regulatory obligations
• ensuring that AI is used appropriately within their organization

This shared-responsibility model helps ensure that AI is used practically, safely and responsibly.

Documents and policies

The following documents support our trust and compliance approach:

• Privacy Policy
• Terms of Service
• Acceptable AI Use Policy
• AI Act Readiness Statement
• Security Overview

Contact

For questions about trust, security, privacy or responsible AI use, contact us at:

privacy@enzover.com