AI Usage Policy

At SupplierGateway, we use artificial intelligence (AI) to help make our platform faster, smarter, and more useful for the customers and suppliers who rely on it every day. We also believe you deserve to know when AI is involved, how it affects you, and what control you have. This policy explains how we use AI across our products and services.

This policy supplements our Privacy Policy and Terms of Service. If there is a conflict between this policy and those documents on a matter they both address, the Privacy Policy and Terms of Service govern.

1. Our Approach to AI

We use AI to support — not replace — important decisions. Where AI contributes to an outcome that materially affects your account, your data, or your business relationships (for example, a supplier risk score or a recommended match), a human remains able to review, question, and override that outcome. We do not use AI to make final, unreviewable decisions about your business relationships without a path to human review.

2. Where We Use AI

AI features may be used within the SupplierGateway platform to, for example:

• Extract and classify data from supplier documents and certifications
• Flag potential risk indicators or anomalies in supplier records for human review
• Power search, matching, or recommendation features
• Power customer support chat or ticket triage
• Summarize documents or generate draft communications

3. How Your Data Is Used

Service delivery only. Data you or your suppliers submit to the platform is used to operate and improve the specific AI features you use — not for unrelated purposes.

No training public models on your data by default. We do not use your confidential business data, supplier data, or personal data to train third-party public AI models unless you've given us explicit permission to do so.

Vetted providers. Where we use third-party AI providers (subprocessors) to power a feature, those providers are contractually required to protect your data and are prohibited from using it to train their own models, consistent with our subprocessor and data protection agreements.

Data minimization. AI features are designed to use the minimum data necessary to perform their function, and sensitive fields may be masked or de-identified before processing where feasible.

4. Security & Compliance

AI features operate within SupplierGateway's broader information security program, which includes access controls, encryption, monitoring, and regular security review. SupplierGateway maintains an ISO/IEC 27001-aligned Information Security Management System and is SOC 2 Type II compliant.

5. Human Oversight & Your Right to Review

If you believe an AI-assisted feature has produced an inaccurate result affecting your account, a supplier record, or a decision about your business — such as a risk flag or score — you can request human review by contacting us at aiusagepolicy@suppliergateway.com. We will investigate and respond within 7 business days.

6. Your Choices

You may be able to opt out of utilising AI-powered features in your account settings.

You can always contact us with questions about how AI is used in connection with your account.

7. Data Retention

Data processed by AI features is retained only as long as necessary for the purpose described in this policy and our Privacy Policy, and is deleted or de-identified in line with our standard data retention practices.

8. Changes to This Policy

We may update this policy as our AI features, providers, or practices evolve. Material changes will be communicated via email notification before they take effect. The "Last Updated" date above reflects the most recent revision.

9. Contact Us

Questions about this policy or how SupplierGateway uses AI can be directed to:

AI Policy Team
aiusagepolicy@suppliergateway.com
32 Discovery, Suite 270, Irvine, CA 92618