When a third party questions your client about their AI.
A large account sends its AI questionnaire, an insurer adds questions, the works council or the CNIL ask what the AI does: each answer starts from the facts in your client's register, dated and sourced.
Your clients’ questions
- A large account asks us which AIs process its data. What do we answer?
- Our insurer is adding questions about AI.
- What have we presented to our works council (CSE), when, and with which document?
- A client, a candidate or an inspection questions us: which documents do we answer with?
What Ojja gives your client
- The client's AI questionnaire, filled in from what is read, each answer with its source and its date.
- For an insurer. The state of the AI in place on a date: the tools and their features, the data they touch, what was turned on with no decision, what was decided and by whom.
- For the works council. A fact sheet: what the tool does, the model, the data it reads, where it goes, on by default or not, what is read of its use, who is concerned. No conclusion.
- For a CNIL inspection. The AI part of an inspection: the features that touch personal data, what they read, where the vendor processes it, whether it trains its models on it, and the decisions recorded, with their dates and sources.
- The signed Constat: it records and dates facts, signed.
Files for third parties come with Ojja Watch Committee; your client can also ask for a single one.
Your role
You prepare the file with your client: you help them gather what cannot be read, they declare it, and each line says where the fact comes from. They review their answers and hand them over.
On the Arvenne example
A large account sends Arvenne its AI questionnaire. The file starts from its register: 14 AI features, what each one reads, where the data goes. Two lines stand out: the image generator, which trains on content, and the meeting transcription tool, which processes outside the EU. Arvenne completes what cannot be read, reviews, and hands over its answers.
Arvenne, a fictional company · sample data
What Ojja never does
- Ojja does not answer in place of your client and does not say whether their answers satisfy their client or a text. It gives them the facts, dated and sourced.
- Neither a file nor the Constat concludes: no risk level, no role, no assessment of whether a text is respected.
- Ojja does not say whether a consultation is necessary or how to conduct it, and does not promise that a deployment will not be challenged.
Ojja does not provide legal advice: it records and documents; how the law applies to your situation is for your counsel to determine.