This page explains how ByteTech OÜ may use artificial intelligence tools during software development and delivery, and the measures applied to protect confidential and sensitive information.
1. Use of artificial intelligence
ByteTech OÜ may use artificial intelligence (AI) tools as part of its software development and delivery processes. AI is used primarily to assist with source-code debugging, code processing, code improvement, optimization, documentation, and increasing the efficiency and speed of software development and delivery.
2. Prohibited use of customer personal data
ByteTech OÜ strongly prohibits the intentional submission, disclosure, or other interaction of AI tools with customer personal data. Our objective is to prevent customer personal data from being exposed to AI systems to the fullest extent possible, including through source code, prompts, files, logs, documentation, examples, test data, or other materials submitted to or processed by an AI tool.
3. Protection of confidential information
AI tools are not intended to be used as a storage mechanism for client confidential information. Client passwords, API keys, authentication credentials, access tokens, personal data, confidential business information, and other sensitive information are protected through appropriate technical and organizational measures and are not intentionally included in source code submitted to AI systems.
4. Contractual exceptions
Customer personal data or other confidential information may be processed in connection with an AI system only where this is expressly agreed with the relevant client in a written contract or other documented instruction, and only to the extent permitted by applicable data-protection and other relevant laws. Any such processing remains subject to the applicable contractual requirements, confidentiality obligations, security measures, data-processing arrangements, and instructions of the relevant client.
5. Secure handling of sensitive values
Where possible, sensitive values are separated from application source code through mechanisms such as environment variables, secure secrets management, access controls, encryption, and other appropriate security practices. Source code provided to AI tools is reviewed and handled in a manner intended to minimize the exposure of confidential or sensitive information.
6. Additional precautions
In the event of an unusual, non-standard, or potentially sensitive situation, additional precautions may be applied, including removing or anonymizing sensitive information, limiting the information provided to the AI system, obtaining additional client instructions or authorization, or performing the relevant development activity without AI assistance.
7. Applicable law and AI publisher guidance
AI use and data handling may be subject to changing laws, regulations, regulatory guidance, contractual requirements, and the terms and policies of the relevant AI publisher or provider. For enquiries concerning AI use, personal data, confidentiality, security, or data handling, the current applicable law and guidance should be reviewed, and the relevant AI publisher or provider should be consulted directly regarding its data practices, retention settings, security controls, processing terms, and applicable product documentation. This page is not legal advice and does not replace advice from a qualified legal professional.
8. Human review and validation
AI-generated or AI-assisted code remains subject to human review, testing, validation, and security assessment before being incorporated into production systems. The use of AI does not replace the responsibility of ByteTech OÜ to maintain appropriate security, confidentiality, and software-development controls.