Bluestone98 AI Policy

Effective Date: 06/05/2026

1. Purpose

This policy outlines how Bluestone98 uses Artificial Intelligence (AI) responsibly across our services. It ensures transparency, protects client data, and confirms that human expertise remains central to all outputs.

We recognise the evolving regulatory landscape, including the EU AI Act (effective August 2026), and are committed to aligning our practices with applicable requirements when working with UK, EU, and international clients.

---

2. Approved Use of AI Tools

Bluestone98 uses AI technologies to support efficiency, ideation, and production workflows. Approved categories include:

• Content generation and editing tools
• Design and prototyping assistance tools
• Code generation and development support tools
• Data analysis and research assistance tools

All tools are:

• Reviewed before use
• Used in controlled environments
• Monitored for security, reliability, and output quality

We do not rely on AI systems that operate without oversight or that cannot meet our data protection standards.

---

3. Human Oversight (Human-in-the-Loop Commitment)

AI supports our team, but does not replace it.

• Every AI-assisted output is reviewed, validated, and approved by a qualified human
• Strategic decisions, creative direction, and final deliverables are always human-led
• We do not provide fully automated outputs to clients without review

This ensures accuracy, accountability, and alignment with client objectives.

---

4. Data Usage and Protection

Data We May Use with AI Tools

• Publicly available information
• Non-sensitive project materials
• Anonymised or non-identifiable data
• Client content where explicit or implied consent has been given

Data We Do Not Use with AI Tools

• Confidential or commercially sensitive client data (unless explicitly agreed and secured)
• Personal data that can identify individuals (unless compliant with GDPR and client-approved)
• Proprietary intellectual property without permission
• Any data restricted by contract, NDA, or regulatory requirements

We follow UK GDPR and EU GDPR principles, ensuring lawful, fair, and transparent data handling at all times.

---

5. Transparency with Clients

We are open about our use of AI:

• We will disclose AI involvement where it materially contributes to deliverables
• Clients can request clarification on how AI is used in their projects
• We will respect any client-specific restrictions on AI usage

---

6. Risk Management and Compliance

Bluestone98 takes a risk-based approach aligned with emerging AI regulation:

• We avoid high-risk AI use cases unless appropriate safeguards are in place
• Outputs are assessed for bias, accuracy, and appropriateness
• We monitor developments in the EU AI Act and adapt our practices accordingly

---

7. Accountability

Responsibility for all work remains with Bluestone98.

• AI tools are treated as assistive technologies only
• Final accountability sits with our team, not the software
• We maintain internal governance over AI usage and decision-making

figma web designsquarespace designworld-class hostingFinancial Services Web Design

---

8. Ongoing Review

This policy is reviewed regularly to reflect:

• Regulatory updates
• Advances in AI technology
• Client expectations and industry best practice

---

AI Policy Contact

For any questions regarding this policy or our use of AI, please contact:
hello@bluestone98.com
+44 330 633 1998