Artificial Intelligence

The first artificial intelligence (AI) features developed by Wooclap teams appeared at the end of 2023 and have been built hand by hand with our partners. For example, AI features are used to assist content creation and analyse open-question results.

Today, AI is used in our Wooclap, Wooflash, and Quiz Wizard applications. We want to develop these uses with and for our users, but we also want to maintain control over our AI practices through additional security and privacy measures.

AI at Wooclap requires the use of a sub-processor; Wooclap has selected OpenAI Ireland Ltd to guarantee a high standard of service quality. Moving forward, we intend to evaluate other sub-processors that provide robust security guarantees alongside a greater emphasis on pedagogy and education

Wooclap Security team ran a Transfer Impact Analysis and we have implemented all necessary additional measures (technical, legal, and governmental) to ensure the security and compliance of data processing (you can also find this in the OpenAI Trust Center). You can find more information and guarantees regarding this processing in our Privacy Policy.

Because AI is a sensitive topic for us and for our partners, we decided to run a Transfer Impact Analysis (TIA) on our AI sub-processor OpenAI (based on the European Data Protection Board (EDPB) model). The analysis we did shows that the Wooclap uses of the OpenAI sub-processor provide a sufficient level to protect data regarding minimised data Wooclap transfers to them.

• No personal data is involved in the data transfer to OpenAI.
• 100% European hosting: All data is hosted and processed in Europe. No data is transferred outside the European Union
• Zero Data Retention: We have a contractual commitment guaranteeing that none of your data is retained by our sub-processor once the request has been processed.
• Security and Privacy reevaluation will be done every year by the Wooclap Security Team.
• Wooclap will follow the security news about OpenAI. If necessary, we will reconsider the measures it has implemented with respect to data transfers to address changing data privacy regulations and risks.

AI is still a new topic for all of us, we want and must stay updated about new laws and follow CNIL and other European guidance.

Wooclap's AI features can be disabled from the user settings in Wooclap account.

For organizations, AI features can be disabled for all users directly from your admin dashboard or by contacting your Customer Success Manager.

Wooclap is also using Amazon Textract, a document analysis service that detects and extracts printed text from images (for example, in our 'Label an image' question). Textract is an Amazon product integrated directly into our infrastructure, benefiting from all AWS security and privacy guarantees. The underlying machine learning model used by this tool has been trained on millions of documents.

Because of this, Wooclap wants to ensure that the AI technology aligns with our security standards. Therefore, users have the option to disable it through their account settings under the AI feature banner. In line with our principles, we have also disabled model training using Wooclap users' data (more information here).

• The author of documents, content, questions, etc. remains the user's property (it is not Wooclap's property).
• Both ingested content (e.g. uploaded documents, audio, video) and AI-generated content remain the sole property of the user.

Wooclap users' data privacy is crucial for us. Currently, we do not use, nor do we intend to use, user-generated content or personal data to train AI models. Plus, we have contractual agreements with OpenAI that prohibit the use of Customer Data to train their models.

If tomorrow we consider using user-generated content to train AI models to improve quality, we will stick to the following essential principles:

• We will comply with European data privacy legislation (especially GDPR and EU AI Act).
• User consent for AI model training will be a prerequisite, and we will be fully transparent about the data used in each AI-related processing.
• We will be strict with our subcontractor, to ensure that the process does not use personal data for model training.
• Finally, model training will be an "opt-in" feature, meaning it will not be enabled by default.