1. What the platform currently does.
The implemented OSINT Scanner collects technical observations and produces rule-based scores and recommendations. Its current scan pipeline does not call a large language model. A security score or NIS2 indicator is an orientation tool, not a certification, legal opinion or proof of compliance.
EdgeAI appliances, private AI deployments and consultancy are separate services with an agreed scope. Their model, hosting location, access rules and data flows must be specified for each engagement. Product plans are not guarantees that a capability is available in the public scanner.
2. Human review and limitations.
Public sources can be incomplete, outdated or inaccurate. Automated checks can miss vulnerabilities or produce false positives. A qualified person should verify findings and agree remediation before making operational, employment or other significant decisions.
The scanner is not designed to make decisions with legal or similarly significant effects about individuals. Do not use its outputs to rank employees, infer sensitive traits or make unsupported accusations. Report suspected errors to support@xrenn.ai.
3. Information and model use.
The current scanner does not submit reports, credentials or client form contents to an AI model for training or inference. Any future external model integration requires a defined purpose, minimized inputs, provider assessment, appropriate contractual terms and updated information before activation.
OpenAI Ads is a separate optional advertising measurement integration. Agreeing to marketing cookies does not authorize AI analysis of your scan report, training on client information or broader penetration testing.
4. Responsible use and changes.
Use automation only for lawful, authorized security work. Do not submit unlawfully obtained information, attempt to bypass access controls or represent automated output as a verified expert conclusion. Material changes to model use or data processing require review and an update to these rules.
