Openness to AI tooling is aligned with our commitment to boosting productivity while maintaining the highest standards of quality and security in our software development practices. These guidelines aim to ensure responsible, ethical, and secure use of AI tools within your company, safeguarding intellectual property and sensitive data while fostering an environment of accountability and continuous improvement.
The purpose of implementing AI tools within 25Friday’s software development processes is to enhance efficiency, improve productivity, and foster innovation in developing solutions. These tools will be utilised across various stages of the software development lifecycle, including but not limited to, coding, testing, debugging, and product management. The scope includes:
AI tools must adhere to strict data governance policies protecting sensitive information and intellectual property. AI tools must comply with GDPR and similar privacy laws, with clear documentation on data usage, access, and protection mechanisms. They should support organisation-wide policy management as well as audit logging.
In practice, this means that tools that might have access to or any confidential or classified business information, including but not limited to source code and other technical and non-technical documents must be fully vetted beforehand to ensure no telemetry exists and that the prompts and information shared with the tool are not used for any other purposes than the one intended with the usage of AI tools. Notwithstanding these guidelines, whenever reasonably possible any data shared with the AI tools should be anonymised.
All users of AI tools understand they are accountable for the AI tools’ results, including adherence to ethical guidelines and accuracy of outputs.
25Friday encourages AI innovation within ethical and data security boundaries, allowing for experimentation with AI tools in controlled environments and is open for suggestions for additional tool as long as they are sound in the productivity improvements they might bring, provided all ethical and data security concerns are addressed.