Skip to content

Artificial Intelligence Policy

1. Overview

TestAssure Solutions, LLC (“TestAssure”) uses artificial intelligence (AI) and large language model (LLM) technology in select product features to help our customers work more efficiently. This policy describes how we use AI, what data is involved, and what protections are in place for our customers.

This policy applies to all AI-powered features within our platform and supplements our Privacy Policy and Terms of Service. We update this document as new AI features are released.

2. Our AI-Powered Features

The table below summarizes the AI features currently available in our platform.

Feature What It Does Data Processed Human Oversight
Triage Analyzer Analyzes failed automated test results and groups them into related failure clusters with suggested root cause categories, helping engineering teams prioritize investigation. Test names, error messages, test details and metadata Advisory only — all triage decisions are reviewed and acted on by your subject matter experts
Additional AI Features Further AI-powered capabilities are in development and will be added to this table upon release. To be disclosed at release. To be disclosed at release.

 

3. How We Use AI Technology

3.1 Third-Party AI Providers

Our AI features are powered by third-party large language model (LLM) providers. We currently use:

  • Google Vertex AI as our primary LLM provider
  • Google Gemini family of LLM models
  • We will update this section if our provider relationships change

When you use an AI-powered feature, relevant data is transmitted to our provider to generate a response. Our agreements with these providers prohibit them from using your data to train their models without your explicit consent, unless you have separately agreed to model training under that provider's terms.

3.2 What We Do Not Do

We want to be clear about the boundaries of our AI use:

  • We do not use your data to train our own AI models
  • AI outputs do not autonomously make decisions that affect your account, billing, or access without human review
  • We do not sell AI-derived insights about your organization to third parties
  • AI features are not used for hiring, firing, lending, or other high-stakes decisions about individuals

4. Data Handling and Privacy

4.1 What Data Is Sent to AI Systems

Only the data necessary to operate a specific AI feature is transmitted to our AI provider. For the Defect Triage Assistant, this includes test identifiers, error output, stack trace information, and test execution metadata. We do not send personally identifiable information (PII) as part of AI feature inputs unless it is incidentally present in test output you have generated.

We recommend customers review test outputs for inadvertent PII before enabling AI features, and configure their testing pipelines to mask sensitive data where possible.

4.2 Data Retention

AI feature inputs and outputs may be retained for a limited period to support debugging, quality assurance, and abuse prevention. Retention periods are as follows:

  • Aggregated, de-identified usage analytics: retained indefinitely

Customers on our Enterprise plan may request shorter retention periods or data deletion in accordance with our Data Processing Agreement (DPA).

4.3 Sub-Processors

Our AI provider(s) are listed as sub-processors in our Sub-Processor List, available in our SOC2 Type II report upon request. We update this list when sub-processor relationships change and provide notice per our DPA terms.

5. Accuracy, Limitations, and Appropriate Use

Important: AI Outputs Are Not Guaranteed to Be Accurate

AI-generated suggestions, groupings, and analyses are probabilistic in nature. They may contain errors, miss relevant patterns, or reflect unexpected behavior. All AI outputs should be treated as a starting point for human investigation, not a definitive conclusion.

Specifically for the Defect Triage Assistant:

  • Failure groupings are based on pattern similarity and may not reflect true root cause relationships
  • The assistant may group unrelated failures together or miss connections between related ones
  • Suggested fix categories are heuristic and require engineering judgment to validate
  • Results may vary based on the quality and completeness of test output provided

Customers are solely responsible for the engineering decisions made on the basis of AI-generated triage results.

6. Your Rights and Controls

6.1 Opt-Out

AI features are available to all customers but are inactive until you choose to use them. No AI processing occurs unless you interact with an AI-powered feature.

You can completely disable AI features at any time by contacting your success manager. Once disabled, AI features will no longer be visible or accessible in your account. This does not affect access to any non-AI functionality.

6.2 Data Subject Rights

If your use of our platform involves personal data subject to privacy laws (such as PIPEDA in Canada or state privacy laws in the US), you may have rights to access, correct, or delete that data. Please refer to our Privacy Policy or contact support@testassure.com to exercise these rights.

6.3 Contesting AI Outputs

If you believe an AI-generated output is incorrect or has caused an issue, please contact support@testassure.com. We will review the matter and, where technically feasible, provide an explanation of the output and a corrected result.

7. Security

AI feature data transmissions are encrypted in transit using TLS 1.2 or higher. Access to AI inputs, outputs, and logs is restricted to authorized personnel on a need-to-know basis. We conduct periodic reviews of AI feature security posture as part of our broader security program.

8. Regulatory Compliance

We monitor the evolving AI regulatory landscape and are committed to complying with applicable laws. Current areas of attention include:

  • Canadian PIPEDA and provincial privacy laws governing data processing
  • US state-level AI transparency and automated decision-making laws
  • EU AI Act, which may apply to customers in the European Economic Area
  • Industry-specific regulations applicable to our customers' sectors

We do not represent that our AI features are suitable for use in regulated sectors (such as healthcare or financial services) without independent legal review by the customer. Customers are responsible for ensuring their use of our platform complies with the laws applicable to them.

9. AI Governance

We maintain an internal AI review process for all new AI features prior to launch. This process includes:

  • Assessment of the data types involved and applicable privacy obligations
  • Evaluation of output accuracy and known failure modes
  • Definition of human oversight requirements for the feature
  • Review of third-party provider terms and sub-processor obligations

Policy reviews occur at least annually and upon the launch of each new AI feature.

10. Policy Updates

We will update this policy as we release new AI features or as our practices change. For material changes — such as new categories of data being sent to AI systems or changes in AI providers — we will provide notice via email or in-product notification at least 30 days before the change takes effect. Continued use of AI features after the effective date of a change constitutes acceptance.

The current version of this policy is always available at www.testassure.com/ai-policy.

11. Contact Us

If you have questions about this policy or our use of AI, please contact:

TestAssure Solutions, LLC (“TestAssure”) Attn: AI Policy Inquiries Email: contact@testassure.com
539 W. Commerce St., Suite 1602, Dallas, TX 75208