Agency AI policy library
Xponent21's AI policy, read and compared
Agency that also sells its own AI suite (CARL); bars providers from training on client content, removes client data after engagements, discloses only when asked.
“AI-generated output, whether it's a first draft, a data pull, or a piece of research, is a starting point, not a finished product.”Read the policy on xponent21.com
- Agency
- Marketing agency
- Country
- United States
- Published as
- policy page
- Policy date
- July 20, 2026
- Tells clients
- Explains when a client asks
- Read in full
- October 30, 2026
What it commits to, in its own words
4 of the 8 commitments the library compares. Each is ticked only because the policy states it as Xponent21's own practice; the words under it are quoted from the policy.
- Human review
- “Every piece of client-facing or published work that involves AI assistance goes through human review before it ships.”
- Explains when a client asks
- “We'll tell you when and how AI was used on your project if you ask.”
- When the client asks: how other agencies word it
- Client data rule
- “Where AI features rely on third-party AI providers to process content, we only send what's needed to complete that specific task, and we do not authorize those providers to use client content to train their models.”
- Names its tools
- “CARL Intelligence and the CARLverse suite (CARL AIO, CARL Writes, CARL Optimize, and CARL CMS)”
Tools named: CARL Intelligence, CARL AIO, CARL Writes, CARL Optimize, CARL CMS
Not stated in the policy as we read it
- Says what AI never does. Names work the agency does not hand to AI (strategy, final creative, publishing, and the like).
- Ownership and originality. Addresses copyright, ownership, originality checks, or consent for using a person's image or voice.
- Named owner. Names the person, role or group accountable for how the agency uses AI.
- Client can limit AI. Clients can limit or exclude AI on their work, or the agency follows the client's own AI rules.
Policies to read next
- Arc IntermediaMarketing agency · 5 of 8 commitmentsSplits what AI helps with from what it never does (publishing, strategy), keeps client data out of public tools, and lists the tools it uses.
- EvenboundMarketing agency · 6 of 8 commitmentsLists its approved tools by name, says when AI shaped content, never shares client data with AI without consent, and stops AI on request.
- FirebrandMarketing agency · 8 of 8 commitmentsNamed people own each deliverable, nothing is made entirely by AI, no confidential material goes into LLMs, and AI use is explained on request.
- Good2bSocialMarketing agency · 6 of 8 commitmentsNever sends anything written entirely by AI, keeps AI away from website code, legal agreements and client strategy, and approves Jasper as its tool.
From Xponent21?
If the policy has changed or we misread it, write to hello@bigpipe.agency and we will read it again and update this page. To point clients or prospects to how your policy compares, link to this page:
https://bigpipe.agency/agency-ai-policies/xponent21<a href="https://bigpipe.agency/agency-ai-policies/xponent21">Our AI policy in the agency AI policy library</a>Read on October 30, 2026 from xponent21.com/ai-policy/. The quoted words belong to Xponent21 and are quoted to show what its policy says; our coding is free to reuse under CC BY 4.0 with a link to this page. How we chose and coded the policies: the agency AI policy library.