AI EXPOSURE ASSESSMENT
TERMS OF USE
By requesting an AI Exposure Assessment, you acknowledge and accept the following terms.
1. Purpose of the assessment
The AI Exposure Assessment is an initial analysis designed to identify potential areas of AI-related regulatory, legal, technical and governance exposure within an organisation.
The assessment is based on the information provided by the requesting organisation and is intended to provide an indicative view of relevant risks, governance gaps and areas that may require further examination.
The resulting report is preliminary in nature and does not constitute a comprehensive legal, technical, cybersecurity or regulatory audit.
2. Information provided
The assessment relies on the accuracy, completeness and relevance of the information submitted to Keryon.
You should provide sufficient information to allow us to understand the organisation, its activities and its known or suspected use of AI. You should avoid providing information that is unnecessary for that purpose.
Unless specifically requested by Keryon, you should not submit passwords, authentication credentials, financial account information, special categories of personal data, medical information, highly sensitive personal information, classified information, source code, trade secrets or other information whose disclosure could create a material security or confidentiality risk.
Where information relating to third parties is provided, you are responsible for ensuring that you are authorised to disclose that information for the purposes of the assessment.
3. Use of artificial intelligence
Keryon uses AI-assisted methodologies and technological tools as part of its regulatory, legal and technical analysis.
Information provided for the assessment may therefore be processed using AI-enabled systems where Keryon considers their use appropriate for the analysis.
Keryon applies professional oversight to the assessment process. AI-generated outputs are used as analytical support and do not independently determine Keryon’s conclusions or recommendations.
By requesting the assessment, you acknowledge and accept the use of AI-assisted processing as part of Keryon’s methodology, subject to the safeguards and confidentiality measures applicable to the service.
4. Confidentiality and data handling
Information submitted for an assessment will be used for the purpose of evaluating the organisation’s AI exposure, preparing the assessment and, where necessary, communicating with the requesting organisation.
Keryon will handle information received in connection with the assessment with appropriate confidentiality and organisational safeguards.
Personal data will be processed in accordance with Keryon’s Privacy Policy and applicable data protection law.
The submission of information does not authorise Keryon to use confidential information, personal data or assessment results for unrelated purposes.
5. Professional assessment
Keryon combines AI-assisted regulatory intelligence with senior legal and technical judgement.
The conclusions contained in an AI Exposure Assessment are therefore based on both the information made available and Keryon’s professional evaluation of its relevance, materiality and regulatory significance.
The assessment may identify areas requiring additional information, specialist analysis, legal advice, technical verification or a more comprehensive governance review.
6. Regulatory scope
AI regulation and related areas of law are evolving rapidly. The assessment reflects the regulatory framework, available information and circumstances considered relevant at the time it is prepared.
Depending on the organisation and the technologies involved, relevant issues may extend beyond AI-specific regulation and include data protection, cybersecurity, contractual obligations, intellectual property, product regulation, sector-specific requirements and other applicable legal or regulatory frameworks.
7. No reliance as a comprehensive legal opinion
The Initial AI Exposure Report is intended to support management in identifying and prioritising potential areas of exposure.
Unless expressly agreed otherwise in writing, it does not constitute a formal legal opinion, certification of compliance, conformity assessment, cybersecurity assessment or assurance that the organisation complies with all applicable legal or regulatory requirements.
Decisions involving material legal, regulatory, technical or business consequences should be subject to the appropriate level of specific professional review.
8. Scope and further engagement
Submission of the assessment form does not oblige Keryon to accept an engagement or undertake additional work.
Where the initial assessment identifies matters requiring further analysis, remediation, implementation or ongoing governance, Keryon may propose an appropriate scope of professional services separately.
Any subsequent engagement will be subject to the terms expressly agreed between Keryon and the client.
9. Acceptance
By submitting the AI Exposure Assessment request, you confirm that:
- you are authorised to submit the information on behalf of the organisation concerned;
- the information provided is, to the best of your knowledge, accurate and relevant to the assessment;
- you understand that Keryon uses AI-assisted methodologies in performing the analysis;
- you understand the preliminary and indicative nature of the Initial AI Exposure Report; and
- you have read and accept these Terms of Use and Keryon’s Privacy Policy.