AI Use and Disclosure Policy

1. Purpose and Scope

This AI Use and Disclosure Policy (“Policy”) establishes the terms governing the use of artificial intelligence (“AI”) tools by Cutibity IT Consulting in connection with consulting, implementation, development, configuration, and deployment services provided to the Client.

For the purposes of this Policy, Cutibity IT Consulting is a sole proprietorship operated by an individual consultant (“Consultant”), and the party receiving the services is referred to as the “Client.”

This Policy is intended to promote the responsible use of AI to improve technical efficiency while protecting Client confidentiality, data privacy, and the quality and integrity of the services delivered.

2. Permitted Use of AI

The Client acknowledges that Cutibity IT Consulting may use AI tools internally to assist with the following activities:

• Software development, code generation, and technical troubleshooting.
• NetSuite customization, configuration, scripting, and implementation support.
• Technical testing, debugging, optimization, and preparation for deployment.
• General research into NetSuite features, functionality, capabilities, and publicly available technical documentation.
• Other internal technical activities intended to improve efficiency and accelerate implementation and deployment.

AI is used as an assistive tool and does not replace the Consultant’s professional judgment, technical expertise, or responsibility for the services provided to the Client.

3. Protection of Client Information

Cutibity IT Consulting will not disclose Client requirements, confidential business information, personal data, credentials, proprietary documentation, or identifiable Client information to AI tools.

AI-assisted research concerning NetSuite features and functionality will be limited to general, non-client-specific questions. Where technical assistance is required in the context of a particular engagement, queries will be generalized or appropriately anonymized to avoid disclosing Client requirements or identifying the Client.

The Consultant will not upload Client documents, production data, configuration exports, or other confidential materials to AI tools unless the Client has expressly authorized the specific use in writing and the use is subject to appropriate data protection and security safeguards.

Both parties will continue to observe their respective confidentiality, privacy, and information security obligations under their applicable agreements and laws.

4. Consulting Sessions and Client Meetings

AI tools will not be used by Cutibity IT Consulting to conduct, record, transcribe, summarize, or generate minutes of Client consultations, workshops, interviews, requirements-gathering sessions, or other Client meetings.

Consultations and Client interactions will remain human-led. Meeting notes, minutes, decisions, and action items will be prepared and maintained through conventional, non-AI-assisted methods.

This restriction applies to AI-assisted meeting recording and documentation regardless of whether the meeting is conducted in person or remotely.

5. Consultant Review and Deployment Accountability

All deliverables, code, configurations, customizations, and deployment changes produced with AI assistance will be reviewed by the Consultant before being incorporated into the Client’s solution or deployed to any environment.

No AI-generated or AI-assisted implementation or deployment output will be deployed without the Consultant’s review.

The Consultant will assess the suitability, accuracy, functionality, security implications, and compliance with the agreed requirements of the relevant output, to the extent applicable to the work performed.

Where appropriate, the Consultant will perform or arrange testing and validation before deployment. The Consultant retains responsibility for reviewing and approving deployment activities undertaken as part of the agreed services.

AI-generated output will not be treated as authoritative solely because it was produced by an AI tool. The Consultant will exercise independent professional judgment and apply reasonable technical verification before using such output in Client deliverables.

6. Approved Tools and Security

Cutibity IT Consulting will use AI tools in a manner consistent with applicable confidentiality obligations, data protection requirements, information security practices, and the terms of the relevant service agreements.

The Consultant will take reasonable steps to ensure that AI tools used for business purposes are appropriate for the intended use and that their relevant data-handling settings and practices are considered.

The use of AI does not authorize either party to disclose information that the party is otherwise obligated to protect.

Any suspected unauthorized disclosure of Client information through an AI tool will be addressed in accordance with applicable contractual obligations and incident management procedures.

7. Disclosure and Transparency

The Client acknowledges that AI may be used internally by Cutibity IT Consulting to assist with technical implementation, development, troubleshooting, research, and deployment preparation.

Such use does not, by itself, change the agreed scope of services, the Consultant’s responsibilities, or the applicable acceptance criteria.

Cutibity IT Consulting will provide further information regarding its use of AI where reasonably requested by the Client, subject to the protection of confidential information, security-sensitive details, and third-party obligations.

Any additional disclosure required by applicable law or an agreement between the parties will be provided in accordance with that requirement.

8. Responsibilities of the Parties

Cutibity IT Consulting will:

• Use AI only as an assistive tool within the scope of this Policy.
• Protect Client requirements and confidential or identifiable information from unauthorized disclosure to AI tools.
• Refrain from using AI for Client meeting recordings, transcriptions, summaries, or minutes.
• Review AI-assisted deliverables and deployment changes before use or deployment.
• Maintain professional accountability for the services delivered.

The Client will:

• Identify any additional contractual, regulatory, or internal restrictions on AI use that apply to the engagement.
• Communicate any specific AI-related requirements to Cutibity IT Consulting before the relevant work is undertaken.
• Continue to comply with the confidentiality, data protection, and other obligations applicable to the engagement.

Any additional restrictions or requirements agreed by the parties will be documented in the applicable services agreement, statement of work, or written amendment.

9. Relationship to Other Agreements

This Policy supplements the consulting services agreement, statement of work, confidentiality agreement, and other applicable agreements between Cutibity IT Consulting and the Client.

If a provision of this Policy conflicts with a binding provision of another agreement between the parties, the relevant contractual terms will govern to the extent of the conflict, unless the parties expressly agree otherwise in writing.

This Policy does not independently expand the scope of services, create a warranty beyond the applicable agreement, or modify agreed limitations of liability.

10. Policy Updates

Cutibity IT Consulting may update this Policy from time to time to reflect changes in AI technology, security practices, legal requirements, or service delivery procedures.

Where an update materially affects an existing engagement, Cutibity IT Consulting will notify the Client as appropriate. Any change to a binding contractual obligation will be subject to the amendment requirements of the applicable agreement.

The version applicable to an engagement will be identified by its effective date or version number.

11. Acknowledgment and Applicability

This Policy applies by default to all consulting engagements undertaken by Cutibity IT Consulting for the Client, in accordance with Section 9 of this Policy.

By entering into a consulting services agreement, statement of work, or other contractual arrangement that incorporates this Policy, the parties acknowledge and agree that this Policy governs the use of AI in connection with the relevant engagement.

Any exception, modification, or alternative arrangement must be expressly documented in writing and agreed to by both parties. Unless otherwise agreed in writing, this Policy applies in its entirety to the engagement.

Where a written contractual arrangement modifies this Policy, the modification applies only to the extent expressly stated in that arrangement, and all remaining provisions continue in effect.