TrueCMS's AI policy, read and compared

What it commits to, in its own words

6 of the 8 commitments the library compares. Each is ticked only because the policy states it as TrueCMS's own practice; the words under it are quoted from the policy.

Human review

“Every AI-assisted output that changes code, content, analysis, advice, or client deliverables must be reviewed by an appropriately skilled person before release.”

Tells clients up front

“We tell clients when AI contributes materially to deliverables, explain the role it played, and identify the human review and sign-off process.”

When AI shapes the work: how other agencies word it

Client data rule

“We avoid entering personal, confidential, commercially sensitive, privileged, or secret material into public AI services.”

Says what AI never does

“Prohibited uses include uploading secrets or unapproved personal data to public tools, bypassing security review, deploying autonomous production changes without approval gates, impersonating humans, or using AI to make high-impact decisions without prior assessment and approval.”

Ownership and originality

“AI-assisted contributions are reviewed for licence compatibility, attribution needs, copied code, and client IP obligations before release.”

Named owner

“The Chief Technology Officer (CTO) owns AI governance, maintains the AI system and use case register, and reports material risks or incidents to the leadership team.”