Plain English. No compliance theatre, no fine-print hedging. This is how ProjxAI actually approaches privacy and security when building AI systems for Australian businesses.
What this page is not: This is not a legal compliance statement, a formal data processing agreement, or a privacy policy. It's a transparent description of how we approach these issues. Our formal Privacy Policy is available separately.
These aren't aspirational values hanging on a wall. They are the decisions we make on every project.
We never store, mine, or monetise your business data. When we build AI workflows for your business, the data flowing through those systems belongs to you — and the design reflects that. We work with you to understand what data your workflows touch, where it goes, and who can see it before we build anything.
We don't build fully autonomous AI systems that make consequential decisions without a person checking the output. Every workflow we design has defined approval points, escalation paths, and clear handoff to a human where it matters. AI handles the repetitive work — your team keeps control of what counts.
Not every AI tool is right for every business. Before recommending any platform or API, we consider what data it will process, whether that data is sensitive, what the provider's data handling policy is, and whether a private or local deployment makes more sense. We'll tell you clearly when a tool is not appropriate for your situation.
AI systems only get access to the data they actually need to do the job. We don't connect tools to full databases when a subset of records will do. We scope API permissions tightly, use read-only access where write access isn't required, and document what each integration can and cannot touch.
If your business operates in health, legal, financial services, or another regulated sector, we apply a higher level of scrutiny to every tool and workflow we recommend. We'll be upfront about what we can and can't help with, and we'll point you to appropriate specialists when your situation requires it.
For businesses where data sovereignty is a hard requirement — government suppliers, healthcare providers, legal firms — we can design and host AI infrastructure that runs entirely within your own environment. No third-party API calls, no data leaving your network. This is a core part of our AI Infrastructure service.
Straight answers to the things risk-conscious buyers want to know before they engage.
If you have specific security or compliance requirements, bring them to the Clarity Call and we'll give you a direct answer.