26 October 2026 (Sydney time)
AI Strategy Co. is an Australian applied-AI workflow company.
AI Strategy Tools provides managed AI workflow solutions for defined operational problems.
Customer Harm Intelligence applies these capabilities to financial-services workflows, beginning with complaint investigation preparation.
mAIGO is a separately scoped advisory-only governance and assurance service covering AI readiness, controls, evidence, vendor due diligence and approval support.
AI Strategy Tools designs and delivers bounded managed AI workflows using approved information sources, workflow logic, AI capabilities, integrations, controls and human-review checkpoints.
Customer Harm Intelligence applies this approach to financial-services operational problems.mAIGO provides governance, assurance and evidence services and remains advisory-only.
The applicable technology, hosting, processing responsibilities, third-party services and customer responsibilities are defined for each engagement.
AI Strategy Co. uses AI both in professional services and within managed AI workflows.
Depending on the use case, AI may assist with interpreting narratives and documents, extracting structured information, retrieving approved knowledge, reconstructing chronology, identifying gaps or inconsistencies, routing work, preparing structured outputs, and accelerating governance and evidence activities.
AI is used within defined workflow boundaries and controls. Consequential decisions remain subject to appropriate human authority and review.
We may use foundation-model services (LLMs) and domain tools inside client-approved environments to draft or structure material that our consultants then check. When using third-party models, we prefer options that support enterprise controls (data residency, access, logging) and clear model disclosures. Our governance references MAS FEAT principles/Veritas methodology and recent industry guidance on generative AI risks (e.g., transparency, monitoring, third-party accountability).
Human-review and approval requirements are defined according to the risk and purpose of each workflow.
For workflows involving consequential customer, financial, regulatory, employment or similar decisions, AI-assisted outputs are intended to support authorised personnel rather than independently determine the final decision.
mAIGO advisory deliverables are reviewed by responsible personnel before issue.
The information processed depends on the agreed service and use case.
Managed AI workflows may process approved customer information, documents, policies, business records, structured data or other authorised sources required for the workflow.
For each engagement, relevant information sources, processing purposes, access controls, deployment architecture, third-party services, retention requirements and data-location considerations are agreed where applicable.
AI Strategy Co. does not use customer service data to train shared AI Strategy Co. models.
We align our work to MAS FEAT and Veritas-style lifecycle checks (materiality, design, data prep, build/validate, deploy/monitor), with added generative-AI guardrails (e.g., hallucination checks, provenance notes, recourse).
Where AI tools are used, we apply vendor DDQs covering: secure SDLC, certifications (e.g., ISO 27001/SOC 2), model transparency, continuity/exit (RTO/RPO), sub processors, and incident notification duties. Evidence and scores are kept in the engagement’s Evidence Pack.
Where relevant to an engagement, governance and solution requirements may consider applicable regulatory, operational-risk, information-security and data-management obligations, including APRA requirements.
When we help a client draft their own transparency notices (e.g., for pilots with customer touch points), we recommend plain-language disclosures about AI use, human oversight, data sources, and how to request a review, consistent with Australian public-sector transparency practice (DTA) and APRA’s own AI transparency example.
We keep engagement-level logs of AI-assisted activities (prompts/outputs where feasible), review for model staleness or drift where testing is in scope, and retain artefacts (registries, risk/exception/incident logs, DDQs, XAI notes, decision memos) per contract and law.
• Clients: You control which AI tools are permitted in your engagement and may opt-out of AI assistance entirely.
• Individuals (privacy): For matters under PDPA (Singapore) or the Australian Privacy Act (APPs), you can request access/correction via the contacts below. We support alternative formats on request.
• Governance & engagements: governance@aistrategy.au
• Privacy requests (PDPA/APPs): privacy@aistrategy.au
• Transparency logs: transparency@aistrategy.au
• Security incidents (24×7 triage): security@aistrategy.au
• Accessibility/alternate formats: accessibility@aistrategy.au
Service levels: business-hours responses ≤ 1 business day; security incidents triaged immediately.
• APRA AI transparency pattern and updates to prudential expectations (esp. CPS 230/234).
• DTA AI Transparency Statements(structure and minimum content for public disclosures).
• MAS FEAT & Veritas plus the MindForge consortium’s generative-AI risk dimensions and lifecycle controls(transparency, monitoring, third-party accountability).
We’ll revise this statement when our AI use materially changes or at least annually, mirroring the update cadence adopted by Australian agencies for transparency statements.
