PromiseTrace

Synthetic demonstration

AI Assurance Pack

Fictional company: Northstar Support Labs · Evidence cut-off: 15 August 2026 · Repository snapshot: demo@7c91e2a

SYNTHETIC
NOT A REAL CUSTOMER
01

REVIEW BOUNDARY

Scope and limitations

Buyer requestAI-use schedule · 8 questions
ProductSupport reply assistant
RepositorySelected paths at demo@7c91e2a
EnvironmentProduction configuration sample
Provider routeSynthetic commercial API account
ExcludedIdentity, billing, non-AI services
Review limitation

No executed provider addendum or account-setting export was supplied. Tier-dependent retention and region claims are therefore bounded accordingly.

02

QUESTION Q-03

Can you substantiate the proposed answer?

“Is customer content retained or used to train third-party AI models?”
PROPOSED BUYER ANSWER

For the reviewed support-reply workflow, customer text is sent through the documented commercial API route. Published provider materials state that API inputs are not used for model training by default. We have not yet verified the account-level feature configuration or an executed retention addendum; those elements remain subject to confirmation.

CLM-001

The reviewed support workflow sends text only through the approved API route.

SUPPORTEDE-01 · E-02
CLM-002

Customer content is not used to train provider models for the reviewed commercial route.

PARTIALE-03 · gap G-01
CLM-003

All model processing and storage remain within the EU.

UNSUPPORTEDG-02
CLM-004

A human can review every generated reply before it reaches an end user.

SUPPORTEDE-04 · E-05
03

OBSERVED SYSTEM

AI stack and bounded data flow

ApplicationSupport assistantapps/support
→
GatewayAI client modulesrc/ai/client.ts
→
ProviderCommercial APImessages feature
→
ReviewAgent draft queuehuman approval
Data classPurposeDestinationPersistenceEvidence
Customer messageDraft support replyCommercial model APIProvider scope incompleteE-01, E-03
Generated draftHuman reviewApplication database30-day internal policyE-04, E-05
04

TRACEABLE BASIS

Evidence and gap ledger

E-01
Repository observation

Provider client and endpoint at reviewed commit.

Observed
E-02
Configuration sample

Production route names the reviewed commercial API.

Observed
E-03
Provider product documentation

Training statement scoped to API product; captured 15 Aug 2026.

Vendor fact
E-04
Application test

Draft cannot send until reviewer approval state is present.

Tested
G-01
Account feature export missing

Obtain an account-level configuration export or attributable support confirmation.

Gap
G-02
EU-only processing unsupported

Current evidence does not establish an EU-only processing or storage claim.

Gap
05

SIMULATED LATER CHANGE

What happens when reality moves?

Provider retention fact superseded
VF-003 v1 → v2
2

claims require review

1

buyer answer affected

1

proposed control reopened

VF-003Retention fact
→
CLM-002Training + retention claim
→
Q-03Issued buyer answer
→
RT-008Human review task

The issued pack remains immutable. The change creates a new review task; it does not silently rewrite the historical answer or announce a breach.

Have a live buyer request that looks like this?

Request a confidential review