Data classification
Define which data may be processed by which capability, provider or environment.
Fresh Kiwi · AI consultancy
We help organisations design AI implementations aligned with their security, privacy and governance requirements.
Capabilities
Define which data may be processed by which capability, provider or environment.
Connect access to existing identity, groups and roles.
Record who used a capability, what action occurred and where approval was required.
Align model and hosting choices with confidentiality, contracts and residency requirements.
Minimise personal data and establish appropriate purpose, retention and controls.
Bound critical decisions with review, approval, fallback and escalation.
Create visibility into unmanaged AI use and provide safe alternatives.
Include providers, subprocessors and platform dependencies in the assessment.
Assess use case, role and risk classification where relevant without unsupported compliance claims.
Build security requirements into design, integration, logging, operations and change management.