AI Governance Policy

Updated: 16 April 2026

Organization: eSolia Inc.

eSolia incorporates AI technologies — including generative AI and AI-assisted automation — into our internal operations and service delivery where they improve quality, efficiency, and responsiveness. We treat AI as category of professional tool among many, subject to the same governance principles we apply to all technology: risk-appropriate controls, management accountability, and protection of client information.

This policy outlines the principles under which eSolia governs AI use across the organization. Detailed internal procedures, tool approvals, and operational controls are maintained separately as part of our information security management system.

1. Management Responsibility

eSolia's executive management is responsible for AI governance. This includes establishing internal policies, approving tools for business use, and ensuring that AI-related risks are assessed and managed proportionately. AI governance is integrated into our broader information security management framework, not treated as a separate discipline.

2. Risk-Based Governance

We apply a risk-based approach to AI use, with controls scaled to the sensitivity of the data and task involved. Internal business operations, client-related work with appropriately handled data, and high-sensitivity information each have distinct management requirements. Information that could identify specific clients, individuals, or system credentials is never provided as input to AI tools, regardless of the tool or circumstance.

3. Protection of Client Information

Client data protection is a priority in all AI use. Our governance measures include verifying that approved AI tools do not use input data for model training, confirming data residency and retention terms, and maintaining administrative controls over tool access. These verifications are conducted at the organizational level as part of our tool approval process.

4. Human Oversight

AI output is treated as a draft requiring human review — not as a finished product or authoritative source. All deliverables undergo verification for accuracy and appropriateness before use. AI-generated content is not cited as a primary source in client deliverables; factual claims are grounded in verifiable references.

5. Compliance and Transparency

eSolia complies with applicable laws and contractual requirements relating to AI use. Where a client contract or applicable regulation requires disclosure of AI involvement, we provide appropriate disclosure. We respond openly to client inquiries regarding our AI practices and the controls we have in place.

Changes to this Policy

We reserve the right to update this AI policy at any time. Changes will be announced in the "updates" section on the top page of this website, and the latest update date will be shown at the top of this page.

For questions about this policy or our AI practices, please contact us through our official channels.

Related Policies

• Information Security Policy — Corporate information security management principles
• Privacy Policy — How we collect, use, and protect personal information
• Data Protection — GDPR compliance and data protection principles