AI Transparency Notice

NetRisk may use AI to:

• Summarize vendor evidence.
• Review public signals.
• Classify risk themes.
• Explain findings in plain language.
• Identify missing context.
• Suggest vendor follow-up questions.
• Draft risk summaries.
• Support AI-to-AI assessment workflows.
• Generate trust intelligence from available information.

AI outputs may be:

• Incomplete.
• Inaccurate.
• Outdated.
• Based on limited evidence.
• Affected by missing or low-quality data.
• Incorrectly interpreted.

NetRisk aims to connect AI-assisted insights to available signals, evidence, and context where possible. When information is missing or uncertain, NetRisk should indicate that the finding needs review or additional evidence.

Users remain responsible for reviewing important findings, validating evidence, and making final decisions.

NetRisk should not be treated as a final authority on vendor risk, security posture, compliance status, or procurement decisions.

If third-party AI providers are used, submitted prompts, evidence, vendor information, or generated outputs may be processed by those providers to deliver the service.

Relevant providers should be listed on the Subprocessors page where applicable.

Customer-submitted data is not intentionally used to train public AI models, unless otherwise stated or agreed.

Do not submit passwords, secrets, private keys, regulated sensitive data, or confidential third-party information unless you are authorized to do so and the feature is intended for that purpose.

For AI transparency questions, contact privacy@netrisk.io.