Responsible AI at Trulioo

As part of Trulioo’s mission to empower the world’s leading companies to fight fraud and financial crime across the customer lifecycle, we deploy advanced technologies including artificial intelligence (AI) to enhance digital identity verification and fraud prevention capabilities.

We recognize that AI introduces novel risks, including inaccurate outcomes, bias, privacy concerns and security vulnerabilities. That’s why we’ve established a Responsible AI Program to promote high risk awareness and take a human-centered approach to the design, development and use of AI across our products and operations.

People remain accountable for the development, deployment and use of AI at Trulioo. We establish human oversight appropriate to each AI system’s purpose and potential impact, including agents.

AI is designed to augment human expertise, not replace it. In line with this theory, one of our core operating principles is consistent human oversight as a standing control to ensure AI is executing as designed. We validate AI-generated outputs before they inform business decisions, review AI-assisted code before deployment, and require appropriate human approval for autonomous actions. AI agents and automated workflows are continuously monitored to help ensure they perform as intended.

To support responsible AI use across the organization, Trulioo maintains Global AI Guardrails that apply to all use cases and are regularly communicated to employees. All employees complete mandatory AI training and are expected to understand its capabilities and limitations, protect customer and company information, and validate its outputs.

We design and operate AI-enabled capabilities to support technical accuracy, reliability, security and resilience at every stage of the software lifecycle.

AI tools, features and providers undergo a cross-functional review before they are approved for use, including assessments by Security, Privacy, Legal, Risk and other relevant teams. We deploy monitoring technology to ensure that only AI technology that has received approval may be used in our products and internal operations.

Once deployed, AI systems are monitored for performance, data drift, security vulnerabilities and unintended behavior. Our AI capabilities operate within Trulioo’s broader information security and risk management program, supported by our ISO/IEC 27001 certification and SOC 2 Type II assurance. Learn more on our Security and Compliance web page.

We use customer and internal data in accordance with applicable laws, our contractual obligations, approved purposes and Trulioo policies. Customer data use is governed by the terms and conditions agreed with each customer. We do not use customer data to train any AI models provided by our third-party technology providers.

We apply privacy and data-protection principles such as purpose limitation, data minimization, and appropriate retention and security. Further information about how Trulioo processes and protects personal information is available through our Privacy Policies web page.

Responsible AI is an ongoing commitment. We continuously review and evolve our AI usage and governance to reflect emerging risks, advances in technology, evolving regulations and customer expectations.

Our Responsible AI program is overseen by a cross-functional AI Steering Committee that promotes responsible AI adoption, helps deliver industry-leading AI-enabled experiences for our customers, and proactively identifies and mitigates AI-related risks.