AI Governance Statement
Suite Enrich Co
Last Updated: April 2026 | Version 1.0
Suite Enrich AI uses artificial intelligence and machine learning to enrich business contact and company data inside NetSuite. We are committed to using AI responsibly, transparently, and in compliance with applicable law, including the Colorado Artificial Intelligence Act (SB 24-205, C.R.S. §6-1-1701 et seq.), effective June 30, 2026.
This page is published pursuant to C.R.S. §6-1-1702(2)(a)(I) as Suite Enrich's public AI governance statement. It will be updated within 90 days of any substantial change to our AI systems or governance practices, as required by §6-1-1702(4)(b).
Colorado AI Act Compliance
Suite Enrich has adopted the NIST Artificial Intelligence Risk Management Framework (AI RMF 1.0) as its AI governance standard. Adoption of the NIST AI RMF constitutes an affirmative defense under C.R.S. §6-1-1706(3) against claims of violation of the Colorado AI Act.
Suite Enrich operates as both a Developer (§6-1-1702) — developing AI systems used in the Service — and as a Deployer (§6-1-1703) — deploying those systems in connection with providing the Service to customers. Both sets of obligations apply.
Customers who use Suite Enrich data to make “consequential decisions” as defined under C.R.S. §6-1-1701(3) are also “deployers” under the Act and are independently responsible for their own Colorado AI Act compliance obligations.
AI Systems Overview
The following AI systems are currently used in the Suite Enrich platform:
| AI System | Purpose | Human Oversight |
|---|---|---|
| Enrichment Matching Engine | Matches customer-submitted records to Third-Party Data Provider profiles using probabilistic matching algorithms. | Customer review required before use in any decision. |
| AI Insights Generator | Generates professional summaries, persona descriptions, strategic insights, and recommended talking points for enriched records using the Claude API (Anthropic). | Output is labeled as AI-generated throughout the platform. Customer review required before reliance. |
| Data Normalization Engine | Normalizes job titles, company names, locations, and professional attributes to standardized formats. | Audit logs maintained. Low consequential risk. |
| Bulk Enrichment Scheduler | Processes batches of records from NetSuite saved searches for automated enrichment workflows. | Customer-configured and initiated. Audit logs maintained. |
Note on high-risk classification: Whether Suite Enrich's AI systems constitute “high-risk AI systems” under the Colorado AI Act depends on how customers use Enriched Data. If a customer uses Enriched Data in connection with a “consequential decision” as defined at C.R.S. §6-1-1701(3), then the system functions as a high-risk AI system in that context. Suite Enrich's terms of service prohibit using AI-generated output as the sole basis for any such decision without independent human review.
AI Principles
Suite Enrich's approach to AI is guided by the following principles, which inform how we design, test, monitor, and govern our AI systems.
Fairness and Non-Discrimination
We design and test our AI systems to avoid algorithmic discrimination. We regularly assess our matching algorithms and AI models for bias across demographic categories. If we discover that the Service has caused algorithmic discrimination under C.R.S. §6-1-1701(4), we will report it to the Colorado Attorney General within 90 days and notify affected customers of the mitigation measures taken.
Transparency
AI-generated fields are clearly labeled throughout the Suite Enrich platform so users always know which data was produced by AI and which came from third-party data sources. We disclose what data is used to produce enrichment results, the known limitations of our AI systems, and the risks of relying on AI-generated output without independent human review. We do not misrepresent AI-generated content as independently verified facts.
Privacy by Design
Our AI systems process only the minimum data necessary to perform enrichment. Customer-submitted data is processed transiently and not stored long-term in Suite Enrich's systems. We do not use customer-submitted personal data to train our AI models without explicit written consent. All AI processing is subject to the same tenant isolation and access controls applied across the entire platform.
Human Oversight
Suite Enrich AI is a decision-support tool, not a decision-making system. Our terms of service require customers to maintain meaningful human review before using AI-generated output for any consequential decision affecting an individual. AI-generated content is labeled throughout the platform to ensure users understand what was produced by AI versus what came from source data. Customers are prohibited from using AI output as the sole basis for any employment, credit, insurance, housing, or other legally significant decision.
Accountability
We maintain an AI System Inventory, AI Model Cards, and documented AI governance procedures aligned to the NIST AI RMF 1.0. We conduct regular reviews of our AI systems for accuracy, bias, and performance. Findings are recorded in our AI Bias and Fairness Assessment Log. All AI governance documentation is available to customers upon written request to support@suiteenrich.com.
Security
Our AI systems operate within the same security perimeter as the rest of the Suite Enrich platform — encrypted in transit and at rest, with tenant isolation, role-based access controls, and audit logging. Third-party AI service providers are vetted for security and data protection practices before use, and are bound by contractual data protection obligations consistent with our Data Processing Agreement.
NIST AI RMF Adoption
Suite Enrich has adopted the NIST AI Risk Management Framework 1.0 (AI RMF) as its AI governance standard. The AI RMF is organized around four core functions:
GOVERN
AI governance policies, roles, and accountability structures. Includes our AI Governance Policy, AI System Inventory, and Risk Tolerance Statement.
MAP
AI risk identification and context assessment. Includes documentation of training data types, intended uses, out-of-scope uses, and third-party AI provider risk assessments.
MEASURE
AI risk measurement and tracking. Includes accuracy tracking, bias metrics, error rate monitoring, and quarterly AI performance benchmarks.
MANAGE
AI risk response and continuous improvement. Includes data quality protocols, complaint handling procedures, model update procedures, and incident response for AI-related issues.
Known Limitations and Foreseeable Risks
- Data accuracy: AI matching and normalization are probabilistic. Results may be inaccurate, outdated, or misattributed. See our Data Quality and Limitations Addendum for detailed accuracy information.
- Bias risk: Matching algorithms may perform differently across industries, geographies, or demographic groups, reflecting patterns in underlying training data and data provider coverage.
- AI-generated content: AI Insights generated via the Claude API (Anthropic) are probabilistic outputs that may be factually incorrect, inconsistent, or reflect biases present in training data. All AI-generated fields are labeled within the platform.
- Coverage gaps: Not all submitted records will return enrichment results. Coverage varies by industry, geography, and company size.
- Data decay: B2B contact data becomes outdated rapidly. Enrichment results reflect data as of the underlying provider's most recent update, which Suite Enrich does not independently control.
- Consequential decision risk: Using AI-enriched data as the sole basis for employment, credit, insurance, housing, or other consequential decisions without human review creates regulatory and legal risk for customers.
Discrimination Risk Mitigation
Suite Enrich has assessed the risk of algorithmic discrimination in its AI systems and has implemented the following mitigation measures:
- Regular bias testing of matching algorithms across demographic categories;
- Human review procedures for flagged or anomalous results;
- Contractual restrictions prohibiting customers from using Enriched Data as the sole basis for any FCRA-regulated or consequential decision without independent human review;
- Clear labeling of AI-generated output throughout the platform;
- A documented AI Bias and Fairness Assessment Log, updated quarterly.
If Suite Enrich discovers that the Service has caused algorithmic discrimination as defined under C.R.S. §6-1-1701(4), Suite Enrich will report such discovery to the Colorado Attorney General within 90 days per §6-1-1702(2)(c)(IV) and notify affected customers.
Third-Party AI Providers
Suite Enrich uses the following third-party AI services as part of the platform:
- Anthropic (Claude API): Used to generate AI Insights fields — professional summaries, persona descriptions, and strategic context for enriched records. Anthropic processes only the enriched record context provided per API call. Customer-submitted personal data is not provided to Anthropic for model training. Governed by Anthropic's Data Processing Agreement and Usage Policies.
Customer-submitted personal data is not provided to any third-party AI provider for model training without express written customer consent.
How to Request Documentation
Customers may request the following AI governance documentation by contacting support@suiteenrich.com with the subject line “AI Governance Documentation Request”:
- AI System Inventory
- AI Model Cards for each AI system
- NIST AI RMF documentation package (MAP, MEASURE, MANAGE outputs)
- Bias and Fairness Assessment Log summaries
- Developer documentation per C.R.S. §6-1-1702(2)(b)
How to Report AI Concerns
If you believe Suite Enrich AI has produced biased, discriminatory, inaccurate, or harmful output, or if you have concerns about how AI systems are being used in connection with a consequential decision, please contact support@suiteenrich.com with the subject line “AI Concern.” We will acknowledge your report within 5 business days.
Version History
- Version 1.0 — April 2026: Initial publication pursuant to Colorado AI Act §6-1-1702(2)(a)(I).