Professional use
Ask:Enact is intended for authorised professional users working in professional settings. I will use it only for my organisation’s approved purposes, within my role and competence, and in accordance with its policies and procedures.
Protecting personal information
I will not enter information into questions, scenarios, feedback or other submitted content that identifies, or could reasonably identify, a service user or any other person.
This includes names, addresses, contact details, dates of birth, identification numbers, case references and combinations of details that could reveal someone’s identity. Removing a name or replacing it with initials does not necessarily make a scenario anonymous.
I may use real professional situations, provided I remove identifying details and include only the information necessary for the question. I will not copy identifiable case records, correspondence, documents, personal health information or criminal-offence information into Ask:Enact. This restriction does not prevent me from supplying the work account details required for registration and authorised support.
The system screens text before submission and storage and asks users to correct flagged information. Screening can miss identifying information. I remain responsible for checking my input and will not treat a successful screening check as proof that a person cannot be identified.
Reporting accidental personal information
If I submit personal information accidentally, or discover it in a response, I will:
- Stop using the affected conversation and avoid copying, sharing or submitting the information again.
- Report it immediately to support@askenact.com and through my organisation’s information-governance or data-protection incident procedure.
- Provide the time, the affected conversation reference if available, and a brief description of the type of information involved. I will not repeat the personal information or attach screenshots containing it.
- Follow instructions for containment, investigation and removal. I will report the incident even if I have already removed the information from my view.
Ask:Enact will coordinate assessment, restriction of access where necessary, and authorised redaction or deletion with its technical support provider. The assessment, action and outcome will be recorded, and suspected breaches escalated through the relevant organisational procedures. Removal from the visible conversation does not necessarily remove information retained elsewhere.
If screening holds back a prompt before submission, I will remove the flagged information and check the whole prompt before trying again. If I am unsure whether personal information has already been submitted, I will report the concern.
AI-generated guidance and professional judgement
Parts of Ask:Enact’s processing use large language models to interpret questions and generate responses. These models can produce statements or inferences that appear plausible and confidently expressed but are factually incorrect, unsupported, incomplete or inappropriate to the circumstances.
Controls are intended to reduce this risk, but errors may still occur. I will review responses critically, check material facts and relevant sources before acting, and apply professional judgement at all times.
Ask:Enact supports professional practice. It does not replace organisational procedures, specialist advice or the judgement of the person responsible for a decision. I will not treat a generated response alone as sufficient grounds for a decision affecting someone’s rights, safety, eligibility or access to services.
Safeguarding, records and referrals
I will follow my organisation’s safeguarding, emergency and escalation procedures without delay and without waiting for product support. I will maintain case records and complete referrals through approved organisational systems.
Acceptable use and account security
I will not use Ask:Enact for unlawful, discriminatory, abusive or harmful purposes, attempt to identify individuals from scenarios, bypass safeguards, access information without authorisation or interfere with the service.
I will keep my login credentials private, will not share my account, and will report suspected account compromise or unauthorised access promptly to support@askenact.com and through my organisation’s security procedures.
Reporting concerns and handling outputs
I will report inaccurate, unsafe, biased or outdated responses, and other support concerns, to support@askenact.com without including identifying information.
I will review outputs before recording or sharing them and will not present unverified generated content as an established fact.
Privacy and access
I acknowledge that account information and system interactions may be recorded and accessed by authorised personnel for the purposes explained in the applicable privacy notice. I will not assume that conversations are anonymous or temporary.
I understand that access may be restricted or suspended where necessary to address misuse, a security concern or a breach of these conditions.
