AI Policy

Scope and Purpose

This policy governs how Pager Studio uses artificial intelligence tools and technologies in delivering AEO (Answer Engine Optimization) services to healthcare practices. It applies to all staff, contractors, and systems operated by Pager Studio. This policy complies with the EU AI Act (Regulation EU 2024/1689) and applicable data protection regulations.

What We Do With AI

Pager Studio uses AI as a tool to help healthcare practices become more visible in AI-generated search results. Our services include:

• +

  Analyzing how AI platforms currently reference healthcare practices

• +

  Implementing schema markup and structured data for AI readability

• +

  Creating authority content optimized for AI citation

• +

  Monitoring AI platform outputs for changes in visibility

• +

  Optimizing physician profiles and practice information for AI discovery

Approved AI Tools

We use AI tools in three tiers based on data sensitivity and risk:

• Approved Tools — AI tools cleared for use with non-sensitive business data. These include large language models for content generation, AI-powered analytics tools, and automated auditing tools. Pager Studio vets all approved tools for data processing practices and privacy compliance.
• Restricted Tools — AI tools that require approval before use. These include any new AI tool not yet evaluated, tools that process client data, and tools with unclear data retention policies.
• Prohibited Tools — AI tools that must never be used with client data. This includes tools that train on user input, tools without adequate data protection, and tools that violate healthcare data regulations.

Prohibited Data

The following types of data must never be entered into any AI tool, regardless of its approved status:

• +

  Protected Health Information (PHI) — patient names, diagnoses, treatment records

• +

  Personally Identifiable Information (PII) — patient Social Security numbers, dates of birth, contact information

• +

  Payment data — credit card numbers, bank account details

• +

  Authentication credentials — passwords, API keys, access tokens

• +

  Source code or proprietary algorithms

• +

  Confidential business information marked as restricted

Data Protection

When using AI tools in our services, we implement the following protections:

• +

  We anonymize client data before processing it with AI tools where possible

• +

  We do not use AI tools that train on client data for their own model improvement

• +

  We log all AI tool usage for audit purposes

• +

  We never share client data with AI tool providers beyond what is necessary for the service

• +

  We maintain data processing agreements with AI tool providers where required

Transparency and Disclosure

In accordance with the EU AI Act Article 50, we maintain transparency about our use of AI:

• +

  We disclose when we create or optimize content on client websites with AI assistance

• +

  We inform clients about which AI tools are used in delivering our services

• +

  We clearly label AI-generated content where required by applicable regulations

• +

  We do not use AI to create deceptive or misleading content

AI Literacy

In accordance with the EU AI Act Article 4, all Pager Studio staff and contractors who use AI tools must complete AI literacy training before gaining access. This training covers:

• +

  Understanding AI capabilities and limitations

• +

  Recognizing potential biases in AI outputs

• +

  Proper data handling when using AI tools

• +

  When and how to verify AI-generated content

• +

  Reporting procedures for AI-related incidents

Pager Studio refreshes training annually and tracks completion.

Incident Reporting

If an AI tool produces harmful, biased, or inaccurate output, or if client data is accidentally exposed through an AI tool, the following process applies:

• +

  Report the incident to the policy owner within 24 hours

• +

  The team secures affected client data and contains the exposure

• +

  The team documents and reviews the incident within 5 business days

• +

  Pager Studio notifies affected clients if their data was compromised

• +

  Pager Studio implements and documents corrective measures

Vendor Assessment

Before adopting any new AI tool, we evaluate:

• +

  Data training practices — does the tool train on user input?

• +

  Data retention — how long is data stored and where?

• +

  Data residency — where is data physically processed and stored?

• +

  Security certifications — SOC 2, ISO 27001, or equivalent?

• +

  Privacy policy — is it clear and compliant with GDPR?

Enforcement

Violations of this policy may result in:

• +

  Immediate revocation of AI tool access

• +

  Written warning and mandatory retraining

• +

  Formal reprimand for repeated violations

• +

  Termination of employment or contract for severe breaches

Review Cadence

Pager Studio reviews this policy at least quarterly and updates it immediately when:

• +

  A major new AI tool is adopted into our workflow

• +

  Relevant AI regulations are updated (e.g., EU AI Act milestones)

• +

  An AI-related incident occurs that requires policy changes

• +

  Client feedback identifies gaps in our AI practices

Contact Us

Questions about this AI policy? Email us at hello@pagerstudio.space.