Results

ExKnow GmbH’s activities are based on a clear understanding of the requirements for quality, information security, and responsible AI management, the relevant legal, contractual, and other binding obligations, and the internal and external factors that influence the company’s activities. The scope and structure of the quality, information security, and AI management systems comply with the requirements of ISO 9001, ISO 27001, and ISO 42001.

The management of ExKnow GmbH is actively committed to quality, information security, and the responsible use of AI. It makes key decisions to ensure compliance with relevant legal, contractual, and other binding obligations. In addition, it promotes the continuous improvement of quality, information security, and AI management performance.

Quality, information security, and AI management objectives, risks, and the handling of changes are clearly defined and documented. ExKnow GmbH plans its business activities with a risk-based and forward-looking approach. This helps prevent errors, reduce security risks, and ensure the responsible use of AI. Customers benefit from reliable processes, the secure handling of information, and the controlled use of AI.

ExKnow GmbH ensures that quality-, information security-, and AI-related tasks are supported by well-trained personnel, appropriate resources, and clear communication. This helps prevent errors and security incidents, promotes the responsible use of AI, and ensures that employees have the necessary competence to meet quality, information security, and AI requirements.

ExKnow GmbH consistently implements the requirements of quality, environmental, and information security management. Employees receive clear instructions for quality-conscious, environmentally responsible, and secure working practices. Processes are stable, and legal as well as contractual requirements are met. Information security risks are regularly assessed and effectively reduced through targeted measures, while an effective response to environmental emergencies is ensured.

ExKnow GmbH regularly evaluates the quality of its processes and identifies potential risks related to information security and the use of AI. It verifies compliance with relevant requirements in the areas of quality, information security, and AI management through internal audits and summarizes the results in a structured management review. This ensures that defined objectives are achieved, legal and contractual requirements are met, and all three areas are continuously improved.

ExKnow GmbH embraces the principle of continuous improvement in the areas of quality, information security, and AI use by regularly reviewing and systematically enhancing relevant processes. As a result, customers can rely on consistently high service quality, effective protection of sensitive information, and the safe and responsible use of AI.

ExKnow GmbH has established clear guidelines for the development and use of AI systems. These are aligned with business requirements, integrated with other organizational policies, and regularly reviewed to ensure their continued suitability, adequacy, and effectiveness.

ExKnow GmbH has defined clear roles and responsibilities for the use, management, and development of AI use cases and AI systems. In addition, processes have been established for reporting and systematically addressing concerns related to AI applications and systems throughout their entire lifecycle.

ExKnow GmbH has systematically identified and documented the resources required for the use and management of AI. These include, in particular, AI applications and tools, relevant data, technical and infrastructure resources, as well as the people involved and their competencies. Both externally provided AI systems and internally developed or operated AI solutions are taken into account.

ExKnow GmbH has established a process for assessing and documenting the potential impacts of AI applications and systems. Particular consideration is given to potential impacts on individuals, groups of people, and society. The assessments are documented and updated as necessary throughout the lifecycle of the respective AI application or system.

ExKnow GmbH has defined and documented clear objectives and requirements for its AI use cases. The lifecycle of AI use cases and AI applications is managed through established processes. These processes cover both the responsible use of external AI systems and, where applicable, the design, development, and further development of internally developed AI systems.

ExKnow GmbH reviews and documents the data used in the deployment and, where applicable, the development of AI applications and systems. In particular, the collection, selection, quality, origin, and preparation of relevant data are considered throughout the entire lifecycle of the respective AI use cases and systems.

ExKnow GmbH ensures that relevant interested parties are appropriately informed about AI applications and systems. This includes information on their use and potential impacts as well as, where applicable, mechanisms for reporting adverse impacts and incidents. In addition, ExKnow GmbH defines what information about AI applications and systems is communicated to interested parties.

ExKnow GmbH ensures that AI applications and systems are used responsibly and in accordance with their intended purpose. Clear objectives and requirements for their use have been defined and documented. AI applications and systems are used in accordance with applicable policies and their respective requirements.

ExKnow GmbH has clearly defined responsibilities related to AI applications and systems with respect to customers, suppliers, partners, and other third parties. When selecting and using external providers, attention is paid to the responsible use of AI. At the same time, customer requirements and expectations are taken into account when using and, where applicable, developing AI applications and systems.