EU AI Act Transparency Policy

Last Updated: March 2026

Our Core Commitment: BMA Law does not sell, share, rent, lease, or disclose customer data to any third party, for any reason, under any circumstances. Your data stays with us. Period.

1. Introduction

BMA Law ("we," "our," "us") is committed to transparency about how we use artificial intelligence in our services. This policy is published in accordance with the European Union Artificial Intelligence Act (Regulation (EU) 2024/1689) and reflects our commitment to responsible AI use, human oversight, and data protection.

This policy applies to all AI systems deployed by BMA Law in the provision of our dispute documentation and arbitration preparation services.

2. AI Systems We Use

BMA Law uses AI technology in the following areas:

2.1 Document Preparation

We use large language models (LLMs) to assist in generating arbitration case documentation, including demand letters, evidence briefs, and filing guides. These documents are generated based on the specific facts and circumstances you provide, combined with publicly available legal procedural information and federal enforcement data.

Human oversight: All AI-generated documents are reviewed for accuracy, legal compliance, and relevance before being delivered to clients. AI-generated content is a starting point, not a final product.

2.2 Tracy AI Assistant

Our website features an AI-powered chat assistant ("Tracy") that helps visitors understand our services, assess whether they may have a case, and navigate our arbitration preparation process. Tracy uses natural language processing to understand your questions and provide relevant responses.

Transparency: Tracy is an AI assistant, not a human. Tracy does not provide legal advice, legal opinions, or attorney-client privileged communications. Tracy's responses are informational only and are designed to help you understand our services.

2.3 Federal Enforcement Data Analysis

We use automated systems to aggregate and analyze publicly available federal enforcement data from OSHA, EPA, DOL, CFPB, and other agencies. This data is presented in aggregate form on our pages to provide context about enforcement patterns in specific geographic areas.

Data source: All enforcement data is sourced from public federal records via ModernIndex. We present aggregate statistics only and do not name specific companies in our analysis.

3. Data Protection and AI

We do not share your data with anyone. When you interact with our AI systems, your data is processed solely for the purpose of providing our services to you. We do not:

  • Sell your personal data to any third party
  • Share your data with AI model providers for training purposes
  • Use your case details to train or improve AI models
  • Disclose your information to advertisers, data brokers, or marketing companies
  • Transfer your data to any entity not directly involved in providing your requested service
  • Store conversations with our AI assistant beyond the active session unless you explicitly create an account

Your conversations with Tracy and any information you provide during the arbitration preparation process are treated with the same confidentiality as all client data, as described in our Privacy Policy.

4. AI Risk Classification

Under the EU AI Act, AI systems are classified by risk level. BMA Law's AI systems are classified as follows:

  • Document preparation AI: Limited risk. Our AI assists in document preparation but does not make legal decisions, render legal opinions, or determine legal outcomes. All outputs require human review.
  • Tracy AI assistant: Limited risk. Tracy provides informational responses about our services and does not make decisions that produce legal effects on individuals. Users are informed that Tracy is an AI system.
  • Data analysis systems: Minimal risk. Our enforcement data aggregation uses publicly available federal records and presents statistical summaries without identifying individuals.

5. Human Oversight

BMA Law maintains meaningful human oversight over all AI systems:

  • AI-generated legal documents are reviewed by qualified professionals before delivery
  • AI system outputs are regularly audited for accuracy, bias, and quality
  • Clients can request human review of any AI-generated content at any time
  • AI systems can be overridden or corrected by human operators
  • No automated decision-making produces legal effects on clients without human review

6. Your Rights Regarding AI Processing

In addition to your rights under the GDPR (detailed on our GDPR Compliance page), you have the following rights regarding our use of AI:

  • Right to transparency: You have the right to know when you are interacting with an AI system. We clearly label all AI interactions on our website.
  • Right to human contact: You have the right to request human assistance instead of AI assistance at any time by contacting [email protected].
  • Right to explanation: You have the right to request an explanation of how AI was used in the preparation of your documents.
  • Right to object: You have the right to object to AI processing of your data. We will accommodate your request and process your case using non-automated means.

7. AI Model Information

Our AI systems use commercial large language models provided by third-party AI infrastructure providers. We have implemented the following safeguards:

  • API-based access only (no data used for model training)
  • Data processing agreements in place with all AI providers
  • No customer data is retained by AI providers beyond the immediate processing request
  • All API communications are encrypted in transit

8. Continuous Monitoring

We continuously monitor our AI systems for:

  • Accuracy and reliability of outputs
  • Potential biases in content generation
  • Compliance with applicable laws and regulations
  • Security vulnerabilities
  • Changes in AI provider terms and practices

9. Contact

If you have questions about our use of AI, wish to exercise your rights, or want to report a concern about our AI systems, please contact:

BMA Law
Email: [email protected]
GDPR/AI inquiries: [email protected]
Website: bmalaw.com

For our complete privacy practices, see our Privacy Policy. For GDPR-specific rights, see our GDPR Compliance page.