Rules written to be checked.

Four rules

1. §1

   AI reads.
   People decide.

   In every sector in which we operate, artificial intelligence reads, compares and flags. None of its output becomes a decision without verification by a professional of that sector, who takes responsibility for it.

   In practice

   In the first sector, ComproCausa’s pre-evaluations are checked by its team and validated on the merits by an appointed lawyer. Italian law establishes the same principle for the intellectual professions: artificial intelligence plays a supporting role and the decision rests with the professional.¹

2. §2

   Every reference checked,
   every figure with its source.

   An analysis is only as reliable as the sources on which it rests. References are checked against the original source; statistics are published with their source and reference year, or not at all. When a figure derives from our own calculation on public data, we state so explicitly.

   In practice

   Kesita checks every citation against the registry. On this site every statistic carries a source and a year, and links to the Sources page.

3. §3

   Data in Europe.

   Whatever the sector, the platform on which the group’s companies operate is hosted in the European Union, on Microsoft Azure, in the West Europe region.

   In practice

   Databases are not exposed to the internet, keys and access credentials are held in a dedicated encrypted vault, and staff reach the infrastructure only through a private network.

4. §4

   Separate companies,
   shared standards.

   Each company in the group has its own sector, its own data, its own infrastructure and its own accounts. Security rules and operating procedures are common to all of them.

   In practice

   Each company is isolated on four planes: resources, identity, secrets and network. The method and the platform are shared; each company’s data remains its own.