AI Literacy and Responsible AI Statement
DSET is an organisation that uses AI assisted systems in its own cyber security operations. In line with our values and with Article 4 of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), which entered into force on 2 February 2025, we apply the principle of AI literacy within our own organisation. This statement explains how we use AI responsibly and the measures we take.
Our Role Under the EU AI Act
For most AI tools we use, DSET acts as a deployer. Where we develop AI assisted security tooling, we also take on provider responsibilities. In both capacities, the AI literacy obligation in Article 4 applies, and we treat it as a continuous commitment rather than a one off task.
Our Commitments
- Written AI use policy. We maintain an approved, versioned internal policy governing acceptable AI use.
- Data classification. Confidential, personal, and client data is never entered into unapproved public AI tools.
- AI literacy training. Our team receives role based training on AI opportunities, risks, bias, and verification.
- Human oversight. AI output is never a final decision; it is reviewed and validated by qualified personnel.
- Transparency. We are clear with clients about where and how AI assisted analysis is used.
- Security and privacy. AI tooling is used with secure configuration, access control, and KVKK and GDPR compliance.
- Continuous review. Our policy and inventory are reviewed at least annually and upon any relevant change.
Legal Framework
- EU AI Act Article 4 (AI literacy), in force since 2 February 2025.
- EU AI Act Article 113(a), under which Chapters I and II apply from 2 February 2025.
- Turkish Personal Data Protection Law No. 6698 (KVKK) for the protection of personal data.
A Resource for Your Organisation
We have prepared a free, fill in the blanks corporate AI use policy template and a step by step roadmap so that other organisations can meet the same obligation. See our AI compliance roadmap and downloadable template.
Contact
For questions about this statement, contact [email protected].
This statement is for information purposes and does not constitute legal advice.