AI Transparency
Executive summary
YecoAI designs and operates AI systems with human oversight, transparency, and fundamental-rights protection in mind, toward the applicable obligations of Regulation (EU) 2024/1689 (EU AI Act) as they become enforceable for our role (provider and/or deployer). This page covers classification, transparency, oversight, individual rights, risk management, documentation, and governance. Key timelines: prohibited practices from Feb 2025; GPAI obligations from Aug 2025; high-risk obligations from Aug 2026–Aug 2027 as applicable.
Classification
DeskNexo — AI Support Agent. Risk class: Limited Risk (Art. 50 transparency). Automates WHMCS support tickets via AI analysis and response generation. Interacts with users and generates content. Transparency obligations applied; human oversight implemented.
Other AI projects: research and development (including Anti-Loop Layer and related tooling). Upon deployment, each undergoes risk assessment and classification. The Yeco LLM Series models (Yeco-PII, Ender-1, Yeco Flash Mini-IT) are models made available to our own products and, where openly published, subject to applicable GPAI or open-source rules. Deployment-specific classifications are published as systems reach production.
Emotion recognition & biometrics: YecoAI does not currently deploy emotion recognition or biometric categorization systems. If that changes, users will be informed at interaction per Art. 50.
Transparency obligations (Article 50)
Users are explicitly informed when interacting with an AI system. DeskNexo notice shown with AI-generated responses: "This response was generated by an AI assistant. Reviewed by human staff."
- Clear "AI" label or equivalent notice
- Notice before/during the interaction
- Clear statement you are speaking with AI, not a human
- Option to request human intervention
AI-generated content marking: text carries visible disclaimers and metadata markers where feasible; email signatures indicate AI assistance when applicable. Synthetic media include disclosure and watermarks where feasible.
What is NOT marked as AI: human-authored company content, manually written documentation, and non-AI product UI do not require Art. 50 AI labels.
Human oversight
- Human operators can override AI decisions via control interfaces
- Users may request human review ("Request Human Agent" where available, or by contacting support)
- Automatic escalation when confidence is low, policy flags trigger, or the user requests a human
Rights of individuals
Right to know you are interacting with AI; right to human intervention/review; right to explanation of significant AI-assisted decisions where applicable; GDPR rights for personal data processed by AI systems. Exercise: [email protected] — Subject: "AI Transparency - Rights Request" (response within 30 days).
Training data and product use
Where product terms state that free-tier or opted-in usage data may improve models (for example Ender-1 within EnderDevelopment), processing relies on the lawful basis disclosed in those product terms and privacy notices (typically consent or another Art. 6 GDPR basis). We do not train shared models on personal data without such a basis.
Risk management, documentation, conformity
Risk management covers design, deployment, monitoring, and incident handling. Technical documentation proportionate to system risk is available to competent authorities and, where applicable, to users: [email protected] — Subject: "AI Act - Technical Documentation". Conformity assessments are carried out for any system that may qualify as high-risk before such obligations apply.
Governance
Accountable entity: YecoAI di Marco Nasi (VAT 04219920040). Continuous regulatory monitoring; staff training on AI Act, ethics, and compliance procedures.
Contact
[email protected] — Subject: "AI Act - [Your Topic]" or "AI Transparency - [Your Topic]". Legal representative: YecoAI di Marco Nasi · VAT 04219920040. Complaint authority (Italy): Garante — www.garanteprivacy.it