AI at ELMO

ELMO has designed its platform to give you control over your data and decisions. ELMO customers choose how AI outputs are used in their decision-making. 

This approach helps reduce bias and ensures that critical decisions remain under your governance. It also aligns with ISO/IEC 42001 standards for the responsible use of AI.

Our AI content editor is built in to get to work whenever you’re ready. Look for the ‘AI’ button on your WYSIWYG editor to get started.

ELMO Assist, our help centre AI, is available to chat with admins. You simply open the pop-up window when you’re logged into the product.  

We’ve added AI features to add value and many are included as part of your existing subscription. Reach out to our team to learn more about how this would applies to you.

Reach out to our ELMO team of HR experts who will be able to help you understand these tools and how you can maximise them to your benefit.

No. Your company’s data and content are never used to train ELMO’s or any third-party AI models. All data stays securely within your ELMO environment and is only processed to provide the AI features you choose to enable.

Yes. AI features in ELMO are completely optional. You can disable them at any time in Settings, and your core workflows will continue to operate as normal. This means you can adopt AI only if and when it adds value for your organisation.

ELMO follows privacy-by-design principles and complies with GDPR and local privacy laws. Customer data is securely hosted in AWS data centres located in Australia. Each customer has a separate database, providing strong segregation of information. Encrypted backups are created daily with regular integrity checks to ensure reliability.

We maintain a transparent list of subprocessors, so you can see exactly which partners support our services, which you can view here. 

All the AI features in ELMO have the same rigorous security protocols applied as the rest of our products, including ISO 27001:2022 Certification and secure engineering principles. We apply a risk based, risk based, multi-layered security approach, which includes:

• Encryption: AES-256 encryption at rest; TLS/SSL in transit.
• Access controls: Strict role-based permissions, multi-factor authentication, and quarterly reviews of privileged accounts.
• Monitoring & alerts: Continuous threat monitoring, intrusion detection/prevention, and centralised logging.
• Testing & audits: Independent annual penetration testing, ongoing vulnerability scans, and ISO surveillance audits.
• Incident response: A formal Data Breach Response Plan, with notification to customers within 48 hours of a confirmed notifiable incident.
• Trusted hosting: Data is hosted on AWS Australia, within environments that meet globally recognized security and compliance standards.

Learn more about our data security here.