Skip to content

Due-diligence pack

The Standard requires firms to document third-party AI supplier due diligence. Chronity is itself one of those third parties, so it generates the pack you need about Chronity — ready to drop into your own supplier due-diligence file.

Find it as the Customer downloads tab under Settings (Firm → Settings → Customer downloads).

What's in it

The pack is a generated document describing, in the terms a due-diligence reviewer expects:

  • What Chronity processes — observations: short summaries of AI-assisted actions, metadata, classifications. Not your mailbox, files, or document content.
  • How it's protected — per-firm encryption applied before storage, encryption keys held separately from the encrypted data, your firm isolated in its own space.
  • Where it runs and where data sits — the platform and data-residency position.
  • Retention — how long observations are kept live and how they're archived.

You regenerate it (so it reflects the current platform) and download it.

When you'd use it

  • Your own RICS file. The Standard asks you to hold supplier due diligence; this is the Chronity entry, done.
  • A client asks. A client's compliance or procurement team wanting to know what this AI tool your firm uses actually does with data — hand them the pack.
  • Your own assurance. Partners or risk wanting comfort about the supplier before relying on it.

What it is and isn't

It's an honest, current description of what Chronity does with data and how it protects it — written so a non-technical reviewer can follow it. It is not a substitute for your firm's own judgement about whether to use the tool; it's the evidence base for making and recording that judgement. Treat it like any supplier DD document: read it, satisfy yourself, file it, refresh it when things change.

That completes the AI Lead reference. Taken together with the Tenant-admin guide and the User guide, it covers every screen and every RICS requirement Chronity touches.

The shape of the role, one last time: sign the taxonomy, own the risk register, approve the alert rules, do the quarterly dip-sample, and be ready to answer. Chronity does the documentation; you do the judgement.