First Touch Studio publishes this statement to the same standard Australian government agencies publish their own. It sets out where we use artificial intelligence, where we do not, how we handle your information, and how you can hold us to it.
This statement applies to all work First Touch Studio delivers, in every jurisdiction, and to every tool we use in delivering it. It exists because you are accountable for what your suppliers do with your information. Governments across Australia now require assurance that third party suppliers using AI meet their privacy and information security standards, and that obligation does not stop at the agency boundary. It reaches us.
We publish it rather than waiting to be asked. If you are evaluating us, this document should answer your AI questions before you have to raise them. Where your jurisdiction applies a specific framework or risk assessment, tell us which, and we will complete it. If this statement does not answer something your process requires, ask, and we will answer in writing.
First Touch Studio (ABN 27 059 706 024) and any subcontractor engaged on your work. Subcontractors are bound to this statement by written agreement before they touch your material.
We use AI. We are not going to pretend otherwise, and a supplier who tells you they do not is either behind or not being straight with you.
What we do not do is let it near your judgement calls, your community's data, or anything that reaches the public without a person having written and checked it. AI makes production faster. It does not make decisions, form strategy, or carry accountability. Those remain human, and they remain ours.
The distinction we hold to is simple. AI can help us do the work. It cannot do the work.
We use general purpose generative AI tools, on business tier agreements, in the following areas. This list is exhaustive. If a use is not named here, we are not doing it.
Every one of these is a production aid. In each case a person has authored the thinking, and a person reviews the output before it goes anywhere.
These are not preferences. They are commitments, and you are entitled to hold us to them.
This is the section that matters most, so it is the most specific.
Material is assessed against the list above. Where it is suitable but contains identifying or sensitive detail that is not needed for the task, that detail is removed first. The tool sees only what it needs to see, and often that means it sees nothing at all.
We use business tier agreements only. Consumer and personal plans are not used for any client work. Our tools operate under terms that provide, at minimum, that our inputs are not used to train the vendor's models, that data retention is defined and limited, and that confidentiality is contractual rather than a matter of vendor goodwill. We will tell you which tools are in use on your engagement, and provide their current terms, on request.
We do not transfer client, community or citizen information offshore without your written approval. Where a tool processes data outside Australia, that is disclosed in the register and we will not put your material through it without asking you first.
One named person is accountable for AI use on your engagement, and you will know who they are before work starts. For most engagements that person is the Principal.
Every deliverable is reviewed by a person before it reaches you. Every public-facing deliverable is reviewed again before it reaches the public. There is no path by which an AI output travels from a tool to your community without a human having read it, checked it, and taken responsibility for it.
Where AI has assisted in producing something we deliver to you, we tell you. In writing, in the deliverable, without being asked. You should never discover it later.
This statement and our underlying practice are aligned to the following. We did not invent our own principles, because you should not have to evaluate a supplier's homemade ethics. Where your jurisdiction applies its own AI governance policy or risk assessment, we work to that as well.
Your agency is obliged to assure itself that third party suppliers using AI meet your privacy and information security standards, and to audit those suppliers. That is true in every jurisdiction we work in. We would rather you did audit us than did not.
A completed AI risk assessment against whichever framework your jurisdiction applies. A current list of the tools in use on your engagement, with vendor terms attached. A record of where AI assisted on your engagement. Evidence of our tool plan tiers and contractual terms. Access for you or your auditor to inspect any of the above.
If an audit finds a gap, we will tell you what it is, fix it, and tell you when it is fixed. We will not argue the point.
If information is entered into a tool in error, or a vendor suffers a breach affecting material of yours, we will tell you. Not eventually. Immediately, and in writing.
We will tell you what was involved, when, what the exposure is, and what we are doing about it. Where the incident is a notifiable data breach, we will support your agency in meeting its obligations under the applicable scheme and we will not contest the assessment.
We would rather report an incident that turns out to be nothing than fail to report one that turns out to be something.
Where AI has assisted in producing material we deliver to you, we keep a record of it: what was produced, which tool assisted, what input was provided, and who reviewed the output. That record is retained for the life of the engagement and provided to you on request.
Material we deliver to a government agency may become a public record. We treat it that way from the outset.
This statement is reviewed at least every six months, and immediately whenever we adopt a new tool, a vendor materially changes its terms, or the governing frameworks change. Each version is dated and the previous version is available on request.
Marcin, Founder, First Touch Studio
hello@firsttouchstudio.com.au · 02 6190 7977
Questions about this statement, our AI use, or a specific engagement are answered in writing.
If you are evaluating First Touch Studio and this statement does not answer a question your process requires, tell us what you need and we will provide it. We would rather do the work than have you guess.
.png)