Policy on the Use of AI at ZANNI GROUP
Purpose
Scope
This policy governs the use of artificial intelligence (AI) within the company. Its purpose is to ensure that AI is used safely, lawfully and efficiently.
It applies to all employees, partners and subcontractors who use, develop or procure AI systems, including TSA, ChatGPT, Claude, Copilot, Gemini and similar tools.
Core Principles
Scope
Prohibited Uses
People remain accountable for all decisions. AI is a tool, not an independent decision-maker. Confidential information, including customer data, trade secrets and personal data, may only be processed in compliance with data-protection requirements. AI-generated material intended for external use should be identified as such where appropriate and relevant. All AI use must comply with applicable law.
Responsibilities When Using AI
Prohibited Uses
Automated decisions in critical areas without human review (for example, safety, personnel matters or approvals). Processing sensitive or business-critical data through public or uncontrolled AI systems. Generating content that breaches the code of conduct, anti-discrimination rules or legal requirements.
Permitted Uses
Responsibilities When Using AI
Drafting, summarising and translating text Brainstorming and idea generation Data analysis and report preparation Technical simulations and optimisation
Always review important results for technical accuracy and verify the facts. Clearly identify sources and distinguish your own contributions. If in doubt, consult your supervisor or the person responsible for AI.
Governance
Training and Review
Company management is accountable externally for the use of AI. Internally, management appoints an AI lead to oversee implementation, approvals and coordination. Every employee must comply with this policy and report risks. New AI tools or higher-risk projects require approval from the AI lead or management.
All employees receive an introduction to the policy. The policy is reviewed annually.
Breaches
Training and Review
Breaches of this policy are handled in the same way as breaches of the code of conduct.