Trust & security
Secure by design, explained before you start
You will be giving us access to your data and systems. Here is exactly how we verify who we work with, how we protect what you share, and how we keep the AI we build safe.
Why we verify every client
ITAI Consulting is a technology and AI consultancy. Projected savings, accuracy figures and timelines are estimates based on comparable engagements, not guarantees. Client verification is completed before any engagement starts, and client data is never used to train public models.
Client verification
Four steps, all visible in your dashboard
- Step 1
Identity verification
We collect your legal name, date of birth and address, and a government-issued photo ID. Authenticity is assessed by a licensed identity provider, never by our website.
- Step 2
Company and purpose
For business engagements we confirm the organisation you represent and the purpose of the work, proportionate to the access you will give us.
- Step 3
Human review
A trained reviewer looks at every case and can approve, ask for more information or decline. You can see the current stage at any time in your dashboard.
- Step 4
Record-keeping
Records are encrypted at rest, limited to authorised staff and retained only as long as required. Every status change is timestamped in an audit trail.
Responsible AI
How we keep the AI we build safe
Your data stays yours
We use enterprise model endpoints with training disabled. Client data is never used to train public models and stays in the region you choose.
Tested before launch
Every system ships with an evaluation set, accuracy targets and a red-team report covering prompt injection, data leakage and harmful output.
Regulation-ready
We classify each use case against the EU AI Act, document it to ISO 42001 practice and keep a human in control of consequential decisions.
Data protection
Your documents, handled properly
- Identity documents are stored in a private, access-controlled store, never in a public bucket and never exposed by a public link.
- Access is limited to you, your assigned reviewer and compliance administrators. Engineers on your project see verification status, not identity documents.
- Data is encrypted in transit and at rest, and retained only as long as required.
- You may request access, correction or erasure of your personal data, subject to our statutory record-keeping obligations.
Licensed providers
Checks performed by licensed firms
Identity verification and document checks are delegated to licensed third-party providers through a secure server-side integration. ITAI Consulting never simulates or self-certifies a verification outcome, and no approval decision is made in your browser.
If a case is declined we will tell you what we can. Some outcomes cannot be disclosed in detail where legislation prohibits it.