Responsible AI
The lines we hold, and how we hold them.
AI that watches people has to be held to a higher standard than AI that writes emails. These are the commitments built into KENAEZ, and for each one, the mechanism that enforces it, because a promise without a mechanism is only marketing.
No facial recognition. Ever.
No face matching, no face or body template, no image embedding, no prompt that compares faces between two images, and no automatic re-identification of anyone.
How it is enforced
An automated test runs on every change and fails if any prompt, string or dependency in the platform introduces face matching. The line is the same for every customer and cannot be switched on.
Descriptions, not identities
People are described by what can be seen in the moment: clothing, colours, what they carry, the vehicle they use. Searches compare those words, never pixels against footage.
How it is enforced
Descriptions use a closed vocabulary. Health, disability, gait and religion are never recorded under any setting, and body descriptions never ride in free text.
No tracking across visits
KENAEZ links sightings of the same person within a single visit, so a guard can follow what happened. It does not follow anyone from one day to the next on its own.
How it is enforced
Linking stops 45 minutes after the last sighting and 12 hours after the first. A later visit is only ever found by an operator-initiated search with a recorded purpose. Links between sites must also pass a travel-time check and a higher evidence bar.
A person makes every decision that matters
AI proposes leads; operators confirm them. Weapons, altercation and vaping modules only ever flag a moment for review; they never issue a verdict.
How it is enforced
Nothing becomes a Retrace sighting until a named operator confirms it, and every confirmation is audited. Two confirmed sightings that could not both be true are flagged as a contradiction for a person to resolve.
Confidence shown honestly
Search results come in bands (linked, strong, possible, weak) with the reasons, never as a percentage, because a percentage reads like an identification.
How it is enforced
A band needs a minimum weight of distinctive evidence. A description that AI did not write from that exact frame is marked, capped at possible, and never becomes evidence.
Sensitive attributes are off unless you justify them
Apparent sex, age band, ethnicity code, build and similar attributes are not read at all by default. An organisation can switch them on only after recording a lawful basis for special category data.
How it is enforced
Every read and write of a description passes the organisation's policy. When on, each value is labelled "apparent" with a warning that it may be wrong, weighs no more than clothing, and can lower a result by one band at most.
What one person may not see, the AI does not tell them
AI descriptions never mention activity at other sites, because a description, once written, can be read by anyone who may see that event.
How it is enforced
Cross-site links are kept as data and assembled per request, filtered by what the reader may see. Absence is invisible: there are no counts or placeholders hinting at what someone else can see.
Your data stays close, and trains nothing
Escalations run on a model hosted in London even where a cheaper model outside the UK exists. KENAEZ does not train AI models on your footage, events or cases.
How it is enforced
The escalation model is pinned to eu-west-2 as a data-residency decision; routine checks use an EU-only inference profile. If you choose to bring your own AI provider instead, processing happens wherever that provider runs.
For your DPO
Help with your own obligations.
You decide why and how your cameras are used; we process data on your instructions. To help, we provide:
- A data protection impact assessment template for Retrace, describing exactly how it behaves
- Suggested signage and privacy-notice wording for CCTV and Retrace
- A data flow panel on every edge node showing what leaves the site and when
- Redacted export profiles for subject access requests and third parties
- Settings to require a reason for searches and limit Retrace to administrators
Reveal what's hidden
See every site you run on one live map.
Bring the cameras you already own. We'll show you KENAEZ on your own buildings, from the first edge node to the morning report.
14-day trial · Monthly licences · UK hosted