The design, development, and deployment of Artificial Intelligence (AI) systems in an ethical, transparent, and accountable manner is of strategic importance to the Company, supporting the achievement of both its short-term and long-term objectives.
To this end, the Company is committed to ensuring compliance with:
- Recognized best practices and governance frameworks
- Applicable national and European legislative and regulatory requirements
- Ethical principles and human-centric values
- The requirements of the Artificial Intelligence Management System (AIMS) as defined in the ISO/IEC 42001:2023 standard
The Company acknowledges the critical importance of building AI systems that uphold fundamental human rights, data privacy, fairness, and transparency. Therefore, it has established and implemented this Artificial Intelligence Policy, which aims to:
- Ensure full compliance with applicable laws, regulations, and internationally recognized standards relating to AI
- Monitor AI systems for potential bias, errors, and emerging risks throughout their lifecycle
- Maintain the confidentiality, integrity, and availability of information processed and managed by AI systems
- Guarantee the effective, safe, and secure operation of AI-enabled information systems
- Ensure timely detection and response to incidents that may compromise the proper functioning, reliability, or trustworthiness of AI systems
This Policy is communicated to all relevant interested parties and is subject to regular review and continuous improvement, in alignment with the principles of responsible AI and the Company’s commitment to sustainable and trustworthy AI adoption.
To achieve the aforementioned objectives, the Company implements the following organizational, technical, and procedural measures:
- Organizational structures are defined and assigned to oversee AI-related matters across the Company.
- AI systems are designed and tested to prevent the introduction of biases related to race, gender, religion, or other protected characteristics.
- Critical AI-driven decisions, especially those affecting human rights or financial outcomes, are subject to human oversight by the Company’s designated governance bodies.
- Data used to train AI systems is collected, stored, and processed in compliance with applicable data protection regulations (e.g., GDPR).
- All AI systems are governed by organizational cybersecurity protocols to protect against unauthorized access, data breaches, or adversarial attacks.
- Ethical considerations are embedded by design into the development of AI systems (“ethics by design”).
- Risk assessments and AI system classification are conducted for each AI project, in accordance with Regulation (EU) 2024/1689 (AI Act), with implementation of relevant controls based on the assigned risk category.
- AI algorithms are subject to rigorous testing for bias, performance, and ethical compliance.
- Comprehensive methodologies for testing, integration, and user acceptance are applied to validate AI systems prior to deployment.
- AI systems are monitored in real time to detect errors, risks, or performance issues.
- An appropriate AI risk assessment framework is applied, including the execution of an AI Impact Assessment (AIIA).
- An incident management process has been developed and implemented to address any issues arising from the use of AI systems.
- Regular training is provided to employees and interested parties on responsible AI use, compliance with ISO/IEC 42001, and data protection requirements.
- AI systems are subject to continuous monitoring for improvement opportunities and compliance with evolving standards.
The Company conducts periodic assessments of AI-related risks and implements the necessary mitigation measures. A dedicated performance evaluation framework is in place to assess the effectiveness of AI system governance processes, including:
- a)Defined performance indicators
- b)A documented methodology for performance measurement
- c)Periodic reporting reviewed by Management with the aim of continuous improvement
The AI Systems Coordinator is responsible for overseeing the implementation, monitoring, and enforcement of AI-related policies and procedures, and for taking corrective actions to eliminate any factors that may compromise the proper functioning of the Company’s AI systems.
All employees and partners with access to AI systems are responsible for adhering to the requirements of this Policy.
My Buddy AI is fully committed to the continuous monitoring and compliance with the regulatory and legislative requirements, and to the continuous application and improvement of the effectiveness of its AI Management System.
