Our Technology

The Octus AI ethical framework consists of eight pillars:
1 – Fairness: AI solutions should be designed to reduce or eliminate bias against individuals, communities and groups.
2 – Transparency: AI solutions should include responsible disclosure to provide stakeholders with a clear understanding of what is happening in each solution across the AI lifecycle.
3 – Explainability: AI solutions should be developed and delivered in a way that answers the questions of how and why a conclusion was drawn from the solution.
4 – Accountability: Human oversight and responsibility should be embedded across the AI lifecycle to manage risk and comply with applicable laws and regulations.
5 – Data integrity: Data used in AI solutions should be acquired in compliance with applicable laws and regulations and assessed for accuracy, completeness, appropriateness and quality to drive trusted decisions.
6 – Reliability: AI solutions should consistently operate in accordance with their intended purpose and scope and at the desired level of precision.
7 – Security: Robust and resilient practices should be implemented to safeguard AI solutions against bad actors, misinformation or adverse events.
8 – Safety: AI solutions should be designed and implemented to safeguard against harm to people, businesses and property.

Yes. Arguably, there’s nothing more important than data privacy and security. We have taken pragmatic measures, including:

• Data Anonymization: We anonymize all data before using it for training or operation. This protects user privacy and ensures compliance with data privacy regulations.
• Access Controls: We implement strict access controls to restrict access to sensitive data.
• Security Protocols: We adhere to industry-standard security protocols to safeguard data from cyberattacks and unauthorized access.
• Regular Audits: We conduct regular audits of our data security practices to identify and address any vulnerabilities.

In addition, we strive for transparency regarding data usage. We provide users with clear information about how their data is used, including in our AI models. Additionally, we may offer users options to control or restrict the use of their data for specific purposes.

We have adopted the NIST Cybersecurity Framework (CSF), a comprehensive and widely-recognized set of guidelines and best practices for managing cybersecurity risks. Adhering to the NIST CSF helps ensure that we maintain a robust and holistic approach to security across our organization.

Additionally, our platform is currently being assessed under the AICPA’s SOC 2 framework. This independent assessment validates that our platform has the necessary controls in place to meet these critical security principles.

We employ a defense-in-depth approach to secure our system, with multiple layers of protection including:

• Encryption of data in transit and at rest
• Strict access controls and authentication mechanisms
• Continuous monitoring and logging to detect anomalous activities
• Regular vulnerability scanning and penetration testing
• Security awareness training for all staff

Adherence to the NIST CSF ensures that we implement security best practices across all critical functions – Identify, Protect, Detect, Respond and Recover.

We take a proactive approach to identifying and mitigating risks, including:

• Conducting thorough security testing and code reviews during development
• Implementing strong input validation and output filtering to prevent common attacks like SQL injection or cross-site scripting
• Regularly monitoring for new AI-specific threats and vulnerabilities
• Applying the principle of least privilege to limit the potential impact of any compromise
• Building in safeguards against misuse, such as rate limiting and strict usage policies

Our upcoming SOC 2 report will attest to the design effectiveness of these security controls.

Yes. We have a comprehensive incident response plan that is regularly tested and updated. Our plan outlines clear roles and responsibilities, communication protocols and step-by-step procedures for containing, investigating and recovering from security incidents.

We also have pre-established relationships with external incident response experts and legal counsel to ensure we can quickly mobilize assistance if needed.

Incident response is a key area assessed under our SOC 2 audit – providing assurance that we have the right capabilities to minimize harm during adverse events.