Legal

AI Ethics

Last updated: 19 October 2026Applies worldwide

This policy sets out the principles Riftion follows when it designs, builds, delivers and operates artificial intelligence (AI) systems. It applies to our services, our platforms, our automation solution packages and this website. It should be read together with our Privacy Policy and our Terms of Use.

1. Scope

This policy covers every AI system that Riftion builds or runs, including:

  • our services: Agentic Systems, Custom Software and Digital Experiences;
  • our platforms: Markproov, Codexward and Seedassay;
  • our automation solution packages;
  • the tools we use in our own work and on this website.

It applies to everyone who works on these systems for Riftion, including our team members and subcontractors.

2. Our Principles

  • People stay in control. Our systems support people; they do not replace human judgment where it matters. Decisions that significantly affect a person have a human checkpoint, and our clients can always review, correct or stop a system.
  • Fairness. We check data and results for bias and work to prevent unfair treatment of any person or group, including on the basis of gender, origin, religion, disability or age.
  • Transparency. People should know when they are dealing with an AI system or with content an AI system produced. We document what each system does, which data it uses and where its limits are.
  • Privacy and data protection. We use only the data a system needs, only for the purpose agreed with the client, and we protect it with technical and organisational measures.
  • Security and reliability. We test systems before release, protect them against misuse and attacks, and monitor them in operation so that problems are found and fixed early.
  • Accountability. Every system has a responsible person at Riftion and a responsible person at the client. We keep records of key decisions, tests and changes.

3. How We Apply Them

We apply these principles at every step of a project:

  • Research: we define the purpose of the system, the people it affects, the data it needs and its possible risks.
  • Analysis: we assess the risks, choose the right level of human oversight and agree on the data plan with the client.
  • Development: we test for accuracy, bias and security before release, and we build in human checkpoints and logging.
  • Delivery and operation: we hand over documentation, monitor the system in use and review it when the data, the purpose or the law changes.

4. Data, Models and Providers

Client data belongs to the client. We use it only to deliver the agreed work.

We do not use client data to train general AI models, and we do not share it with third parties for their own purposes, unless the client agrees to this in writing.

When a system uses a model or a service from a third-party provider, we choose providers that offer adequate security and data protection. Where available, we use terms that do not allow the provider to train its models on our clients' data, and we put data processing agreements in place where the law requires them.

Personal data is processed in line with the EU General Data Protection Regulation (GDPR), the Turkish Personal Data Protection Law No. 6698 (KVKK) and the other laws that apply to each project.

5. Uses We Do Not Accept

We do not design, build or operate AI systems that are intended to:

  • manipulate or deceive people in ways that can harm them;
  • exploit the vulnerabilities of children or other vulnerable groups;
  • score or rank people by their social behaviour or personal characteristics in a way that leads to unfair treatment;
  • carry out covert or unlawful surveillance, or identify people from biometric data without a lawful basis;
  • impersonate real people or create misleading content about them without their consent;
  • discriminate unlawfully against any person or group;
  • develop weapons or cause physical harm;
  • break the law, including the practices that the EU AI Act prohibits.

We may decline or end any project that conflicts with this policy.

6. Laws and Frameworks We Follow

We follow the laws that apply to our work and use recognised international frameworks as our reference:

  • the EU Artificial Intelligence Act (Regulation (EU) 2024/1689);
  • the GDPR and the KVKK;
  • the OECD Principles on Artificial Intelligence;
  • the UNESCO Recommendation on the Ethics of Artificial Intelligence;
  • the NIST AI Risk Management Framework;
  • ISO/IEC 42001, the international standard for AI management systems.

Referring to these frameworks does not mean that Riftion holds a certification under them. We will say so clearly if and when we obtain one.

7. Shared Responsibility

AI is used responsibly when the builder and the user work together. Riftion is responsible for how it designs, builds and tests a system. The client is responsible for how it uses the system in its business, for having a lawful basis for the data it provides, and for informing the people the system affects.

We explain the limits of each system and advise our clients on its responsible use.

8. AI on This Website

RIOSBOT, the assistant on our Contact page, answers only from the content of this website, in your browser, without an AI model. Your messages do not leave your device. We do not use AI to profile visitors to this website.

9. Questions and Concerns

If you have a question about this policy, or a concern about an AI system that Riftion has built, please write to hello@riftion.com with “AI Ethics” in the subject line. We review every message and reply as soon as we can.

10. Changes to This Policy

We review this policy as technology, our services and the law change. The version on this page, with its “Last updated” date, is the current one.