LUMINARYX™Canadian Municipal AI Governance
LUMINARYX™Canadian Municipal AI Governance

Briefing noteVendors, contractors and privacy

Vendors and contractors: the same rules as staff

Your vendors use AI too

Work delivered by consultants and vendors is often produced with AI, and you are still accountable for it. In LUMINARYX™ vendors declare that use in a portal, and your staff's review stays on the record.

The contractor and vendor portal

InvitationYou invite a vendor by email, with their company and type of work. They see only the decision areas you assign.
DeclarationsFrom one of 7 templates, they state which AI tools they use on your work, for what, on what data, and with what human oversight.
Four areasAI use disclosure, data stewardship, safeguards and competency, and a compliance attestation.
Certificates and insuranceThe vendor states whether they hold a SOC 2 report or cyber insurance and consent to audits, and can attach documents. These are the vendor's own statements and documents: LUMINARYX™ records them and flags what is missing, but does not certify them.
Score and checksA risk score from 0 to 100, and pass, warning or fail against each Canadian requirement that applies.
Your reviewStaff accept, reject, flag or return it, with comments on the record.
In your registerEvery submitted declaration becomes a decision in your register, with the same approvals and audit trail as your own.
RenewalAccepted declarations last one year. A list shows which are coming due.

Privacy impact assessments

LUMINARYX™ does not write your privacy impact assessment. It makes sure one is accounted for. Where a decision needs one, staff attach it as evidence. Whether it meets the law is a question for your privacy officer and counsel.

A decision can also carry a structured AI impact assessment, reviewed by a manager, a department head or the CAO.

Policy into practice

Most municipalities already have the rules. LUMINARYX™ makes each one a step someone takes and signs, for staff and vendors, and keeps the record.

One record, every role

THAT the Chief Administrative Officer add the municipality to the LUMINARYX™ early-access list.

Add my municipality