Responsible AI

What the model does, and what it doesn't

Aicura runs on Anthropic's Claude models via AWS Bedrock in Sydney (ap-southeast-2). Claude is used for document analysis (scanning privacy and governance documents), generation of draft transparency statements and policy text from structured register data, pre-population of risk-assessment fields and parsing Helper PDF content.

The platform does not use Claude, or any model, to make compliance determinations, render legal advice or produce final outputs without human review. The model is one component of a layered architecture, in which Aicura's interpretive content (assessment briefings, framework mappings, regulatory criteria) is curated by Aicura, persisted in the platform and applied via prompts. The model executes interpretation against that content and does not constitute the interpretation itself.

Human oversight

Every AI-generated output is a draft requiring human review before reliance, sharing or publication. This is made explicit in the product UI at the point of generation rather than buried in terms, and AI-generated content is labelled. Aicura does not publish anything on a customer's behalf.

Data handling

• Inference runs within Australia; customer data does not leave Australia for AI processing.
• Requests go through AWS Bedrock, not directly to Anthropic. Under Aicura's agreement with AWS, customer inputs and outputs are not used to train or improve foundation models, and model providers (including Anthropic) cannot access prompts or completions.
• AI processing logs (prompts and output) are retained up to 90 days for debugging and quality assurance, then automatically deleted, with the canonical record sitting in the application database. AWS-side full-text invocation logging is intentionally not enabled, to avoid duplicate at-rest copies of customer content.
• Multi-tenant isolation and customer-managed-key encryption apply to AI-related data as to everything else.

Guardrails, and a plain note about them

A model guardrail capability exists but is deliberately not applied as a generic filter. Generic content and topic filters false-positive on regulatory text, since anti-discrimination law reads as "hate" and "legal/financial advice" topic blocks hit exactly Aicura's domain, and PII anonymisation would strip the contact details that generated governance and privacy policies are supposed to contain. Critically, there is no free-form prompt surface, because every input is structured data Aicura constructs or a document the customer chose to upload, so a generic guardrail has nothing to protect that it wouldn't corrupt. This holds even for customers running Aicura's guardrail enforcement, because the AI gateway and its scanners run in the customer's own environment and their AI traffic never reaches Aicura. The relevant control for untrusted text inside uploaded documents is handled at the application layer (treating document content as data, not instructions), not by a blanket model filter.

Frontier-model dependency & concentration risk

For APRA-regulated customers in particular, adopting Aicura does not materially increase concentration on a single AI vendor.

• The platform abstracts the model. The interpretive content, register, assessments, generated documents and workflow are Aicura's, not the model provider's. On your AI risk register, the appropriate entry is "Aicura AI governance platform (interpretive guidance, runs on AWS Bedrock in Australia)" rather than the underlying model.
• Substitution is a configuration change, not a rebuild. The Bedrock Converse API provides a single wire format across model families, so a model swap is a configuration change plus a smoke test. Prompts already run against non-Claude models in development, confirming portability.
• How we would respond to a disclosed model concern. Assess impact on Aicura's specific use, meaning document analysis and structured generation rather than code execution, autonomous action or tool use, notify affected customers and switch to an alternative Bedrock-hosted model if the concern materially affects our use.

Where this is disclosed

Our use of large language models, the no-training commitment and the 90-day log retention are disclosed in our Privacy Policy. The probabilistic, draft nature of AI output and the requirement for human review are in our Terms of Service. This page is the standing public statement.

Toward formal AI governance

Aicura is evaluating ISO/IEC 42001 (AI Management System) as the most on-brand formal framework for an AI-governance vendor. We don't claim it ahead of time.