AuditHQ AI Policy
AuditHQ uses AI to explain verified audit evidence, not to invent findings. This policy explains what AI is used for, what data may be processed, how human review works, and how to ask questions about AI processing.
How AuditHQ uses AI
AuditHQ runs deterministic audit checks first, then uses AI to explain verified findings in plain English. AI may help write executive summaries, action plans, and report narrative, but it does not invent findings or replace the underlying evidence.
What data may be processed
AI providers may receive submitted public URLs, extracted public page text, technical signals, score context, and audit findings. AuditHQ does not intentionally send passwords, payment card details, private credentials, or private website content to AI providers.
Training and review posture
AuditHQ is designed to use business API providers for customer-facing report generation. Reports should be reviewed before legal, security, privacy, compliance, or major commercial use. Public marketing and documentation pages remain discoverable by AI answer engines; private account routes remain blocked from indexing.
What AI does not do
AI does not perform the underlying audit, choose scores or severities, or create findings without evidence. AuditHQ runs deterministic checks first, then uses AI only to explain verified results in clearer language.
Responsible AI framework (NIST AI RMF alignment)
AuditHQ maintains a responsible AI framework aligned with the four NIST AI RMF functions. Govern: a named owner is accountable for AI behaviour in reports, and this policy documents permitted and banned uses. Map: AI use is confined to explaining deterministic audit evidence, and the data that reaches AI providers is documented on this page. Measure: findings carry evidence and confidence fields, and an automated regression suite guards against AI-fabricated evidence. Manage: incorrect findings are retracted in place with a visible correction rather than silently edited. AuditHQ is not ISO/IEC 42001 certified; this section is a plain-language statement of our AI management system practices, and formal certification will be assessed as the team grows.
Questions and opt-out requests
Customers can contact hello@audithq.com.au about AI processing, report wording, data rights, procurement questions, an AI training opt-out for submitted data, or requests to avoid AI-assisted report language where supported by the workflow.