Responsible AI
How we use AI, and how we protect you.
We're a heavy-AI-use company, and we think you deserve to know exactly what that means for your data. Here's where we use AI and the rules we follow.
Where we use AI
Every day, on purpose.
Service desk triage
AI reads incoming tickets and helps prioritize, route and escalate them based on urgency, impact and client agreements. Engineers own every ticket and every fix.
Workflow automation
Automations (built largely on n8n) move information between our systems, such as website forms into our ticketing system, so nothing falls through the cracks.
Drafting & summarizing
Staff use AI to draft documentation, summarize long threads and prepare reports. A person reviews and owns anything that goes to a client.
Building software
We use AI coding assistants when developing, including on this website. Code is reviewed, tested and security-checked by people before it ships.
Client solutions
We build AI voice agents, assistants and automations for clients, under the same rules described on this page.
Our principles
The rules we hold ourselves to.
Guided by the NIST AI Risk Management Framework: govern, map, measure and manage AI risk.
People stay accountable
AI assists; people decide. Anything that affects a client’s systems, data, security or bill is reviewed by a member of our team.
Client data is protected
We don’t put client confidential information, passwords, payment card data, health information or controlled unclassified information into consumer AI tools. For AI that processes client data, we use business or API services with contractual data protections, choose providers that don’t train on that data, and limit access to what each task needs.
Regulated data gets stricter rules
Where HIPAA, financial privacy, CJIS or similar requirements apply, AI is only used with services and agreements that meet those requirements, or not at all.
Transparency
When you’re talking to an AI, such as a voice agent or chat assistant we build or operate, it’s disclosed. Ask us at any time which AI services touch your data.
Security by design
AI integrations get least-privilege access, managed and rotated keys, logging, and review for prompt injection and data leakage before they go live.
Vendors are vetted
Before adopting an AI service we review its data retention, training use, storage location, security practices and contract terms, and we re-check as they change.
Your choices
Would you rather we not use AI on your account? Tell us, and we'll handle your tickets, documentation and reports without it wherever possible.
If you have questions about how AI touches your data, email Help@incognitoit.com or call (833) 805-0911.
We review this statement at least once a year and whenever our use of AI changes significantly. Last reviewed October 2026.
Want the same clarity for your business?
Our AI governance service helps you write and enforce your own AI policy. Start with a free AI readiness assessment.