ai · security · skills

Research · multilingual policy comprehension

Ask Hermes Agent about any security standard.Hear the answer. See the clause.

Type a question in plain language, in yours. Hermes Agent answers aloud, and shows you the exact clause it came from, every time.

One clause, eight languagesEnglish
AI Controls Matrix (AICM) DSP-15 · v1.1.0AÑÃÉ

Asked in English

Can I use real customer data to test our new AI feature?

Same answer, same clause: AI Controls Matrix (AICM) DSP-15Limitation of Production Data Use, cited every time.

8 languages · English · Español · Português · Français · 简体中文 · हिन्दी · ಕನ್ನಡ · தமிழ்Corpus: 20,475 chunks · AICM v1.1.0 · AICM-Guidelines v1.1.0 · AI-CAIQ v1.1.0 · AISMM v3.7 · CCM v4.0.13Viewer tier: public · verbatim CSA text shown as a clause pointer

One everyday question · eight languages

Can I use real customer data to test our new AI feature?

A question every development team hits, answered with its clause. Pick a language, read it, listen to it.

Plain-language answer

Not by default. Before real customer data can be used in a test or development environment, the data owner must authorize it and the risk must be managed first — anonymize or pseudonymize the data, and copy only what the test actually needs.

Conditions and exceptions

  • Authorization from the data owner must come before the data is used or replicated — not after.
  • Anonymize or pseudonymize the data to reduce the risk of exposing personal information.
  • Replicate only the minimum data the test needs.
  • The replication must comply with data-protection law such as GDPR (General Data Protection Regulation).
AI Controls Matrix (AICM) 1.1.0 · DSP-15ModeledReal fixed-corpus result, not independently reviewed.

The grounding, drawn

The answer is picked out of a field, not composed.

Below is the whole control corpus, one mark per control. Each question makes the light settle on the single control its answer rests on. That is what a citation means here.

Every answer lands on one controlHRS-02

Rests on: Acceptable Use of Technology Policy and Procedures · Human Resources

What this is. A research artifact that reads the CSA standards corpus without softening, blending, or inventing. It cites every claim and abstains when the corpus is silent. Decision support — confirm with your policy owner before you rely on it.