Artificial Intelligence (AI) Governance & Responsible Use Statement
At Cynet, AI is a force multiplier – not a replacement for human judgment. We are committed to deploying AI that is secure, transparent, and fair, and to fostering a culture of proactive ownership at every level of our organization.
Scope & Application
At Cynet, Artificial Intelligence (AI) is used to enhance business operations, improve efficiency, and support informed decision-making while maintaining responsible governance and accountability. This statement reflects a single, consistent standard that we apply across every location and jurisdiction in which we operate, including throughout the United States and Canada and other geographies. Where a specific law imposes a stricter requirement, we follow that stricter requirement in that location. Our goal is one high standard everywhere, rather than the minimum permitted in any given place.
Governance & Accountability
Cynet maintains a formal AI governance framework that spans business, legal, compliance, information security, and technology functions. All AI initiatives are evaluated, approved, and continuously monitored to ensure alignment with our organizational objectives, contractual commitments, and applicable regulations.
AI at Cynet augments human expertise – it does not replace human responsibility. Every decision, action, and outcome remains the accountability of authorized personnel.
Data Protection & Privacy
Protecting personal information, confidential information, and sensitive business data is fundamental to Cynet’s use of AI. Appropriate administrative, technical, and organizational safeguards are implemented to protect information throughout its lifecycle and to support our privacy, confidentiality, cybersecurity, and data protection obligations. AI is not used to process, disclose, or expose confidential, proprietary, regulated, or personal information unless authorized and protected by appropriate authorization, a lawful basis, and security controls in place.
Biometric Data
Where applicable, and prior to collecting or processing biometric information, Cynet provides any required notices or disclosures and obtains any required consents in accordance with applicable laws, contractual obligations, and regulatory requirements. Biometric information is protected through appropriate security controls, retained only as long as necessary for its intended purpose, and securely destroyed in accordance with applicable legal, contractual, and business retention requirements. Cynet does not sell biometric information and we require our vendors to meet equivalent standards by contract.
Permitted Use of AI
AI may be used to support legitimate business activities, including operational efficiency, research, knowledge management, content development, process improvement, training, and other authorized business functions. Users remain responsible for reviewing and validating AI-generated outputs before relying upon them in business operations.
Prohibited Use of AI
Cynet strictly prohibits use of AI that compromises privacy, confidentiality, security, fairness, or the rights of individuals. This includes unauthorized processing or disclosure of confidential, proprietary, personal, regulated, or protected information, as well as any use that is unlawful, discriminatory, deceptive, or designed to circumvent applicable laws or internal governance requirements.
Third-Party AI Services
Where AI technologies are provided by third-party vendors or service providers, Cynet conducts appropriate legal, privacy, security, and risk assessments before implementation. Third-party AI solutions are expected to meet applicable contractual, regulatory, and security requirements consistent with Cynet’s governance standards and applicable laws.
Legal & Regulatory Compliance
Cynet complies with all applicable federal, state, provincial, territorial, local, and international laws, regulations, regulatory guidance, contractual obligations, and industry standards including key state-level laws such as the California Privacy Rights Act (CPRA), health-information privacy requirements such as HIPAA where applicable, and applicable U.S. state AI-specific laws governing the responsible use of AI, privacy, cybersecurity, automated decision-making, employment, biometric privacy, employment, healthcare, consumer protection, and data protection and any other such governance in every jurisdiction Cynet operates.
Our AI governance practices are informed by recognized industry frameworks, including the National Institute of Standards and Technology (NIST) Artificial Intelligence Risk Management Framework (AI RMF), together with applicable jurisdiction-specific AI, privacy, and data protection requirements. Cynet continuously monitors legal and regulatory developments and updates its governance practices as necessary.
Cynet is committed to the fair, ethical, and responsible use of AI. Cynet takes appropriate measures to identify, assess, and mitigate the risk of unlawful bias or discrimination throughout the design, deployment, and use of AI. Human oversight is maintained throughout decision-making to ensure AI supports rather than replaces professional judgment.
Individual Rights
Consistent with applicable privacy and AI laws, we support individuals’ rights regarding automated decisions and personal information which may include the right to be informed, to request an explanation of how a decision was reached, to access or correct their information, to request human review, and to opt out of certain automated processing. Requests and questions can be directed to the contact below.
Responsible Use of AI in Recruitment and Employment Decisions
Because Cynet places people, we hold AI used in recruitment, screening, and employment-related decisions to a heightened standard. Across all locations, we commit to the following:
- Notice. We inform candidates and employees when AI is used in a meaningful way to screen, assess, or help select them.
- Human review. Consequential decisions about a person are not made by AI alone; qualified personnel review and retain responsibility for the outcome.
- Fairness and bias testing. AI tools used in people-related decisions are subject to bias and fairness review, with corrective action taken where issues are identified and records maintained for accountability.
- No prohibited proxies. We do not permit AI to use protected characteristics or close proxies for them, such as ZIP or postal codes as a basis for employment decisions.
- Accommodation. We provide reasonable alternatives or accommodations where an individual is unable to be fairly assessed by an automated tool.
AI Approval Framework, Monitoring & Enforcement
Every AI solution undergoes a structured review and approval process before deployment, covering legal, regulatory, privacy, security, operational, and business-risk dimensions. No AI tool is approved for use until the applicable governance and risk-assessment requirements have been satisfied.
Cynet maintains ongoing oversight of AI usage across the organization. We reserve the right to monitor, audit, and review AI activity to ensure compliance with internal and external requirements. Suspected misuse, unauthorized access, or policy violations are investigated and addressed through appropriate corrective, disciplinary, or legal measures.
Every AI solution undergoes a structured review and approval process before deployment, covering legal, regulatory, privacy, security, operational, and business-risk dimensions. No AI tool is approved for use until the applicable governance and risk-assessment requirements have been satisfied.
Cynet maintains ongoing oversight of AI usage across the organization. We reserve the right to monitor, audit, and review AI activity to ensure compliance with internal and external requirements. Suspected misuse, unauthorized access, or policy violations are investigated and addressed through appropriate corrective, disciplinary, or legal measures.
Ethics & Responsible AI
Our commitment to responsible AI is grounded in the principles of fairness, accountability, transparency, privacy, security, reliability, safety, and respect for human rights. We work to ensure that AI technologies build trust, support responsible innovation, and protect the interests of our employees, candidates, clients, and business partners. For us, integrity, compliance, security, and human accountability are not constraints on innovation; they are its foundation. We remain committed to continuously strengthening our AI governance framework as technology, business needs, and regulatory expectations evolve.
