AI policy

Basic Philosophy

Rimo LLC (the "Company") is guided by the principle of "bringing the future to work" and operates businesses that use AI.
The AI systems we develop and provide form the foundation that supports our customers’ work and decision-making, and developing, providing, and using them responsibly is fundamental to the trust our Company is built on. While pursuing the benefits AI can bring, we also recognize the potential impact AI may have on individuals, groups of individuals, and society. Everyone involved in AI systems—including officers and employees—will comply with this policy and practice responsible AI.

Basic Policy

1. Establish and continuously improve the AI management system

   To realize our basic principles, we set goals and establish an AI management system (AIMS) aligned with our existing information security management system (ISO/IEC 27001 and 27017), implement it, and continuously review and improve it. We will also establish procedures to manage the AI system lifecycle from design and development through validation, monitoring during operation, changes, and retirement.

2. Compliance with laws and regulations, and contracts

   We establish this policy and related internal rules based on it, conduct our business in accordance with them, and comply with laws, regulations, and other standards related to AI and data protection, as well as contractual commitments with customers.

3. Respect for AI principles

   Based on domestic and international standards, including the “AI business operator guidelines,” we strive to ensure the fairness, safety, reliability, transparency, and accountability of AI systems under a human-centered approach. We also place importance on having humans involved in critical decision-making, and we work to design AI systems so that humans can review and correct their outputs.

4. Risk assessment and impact assessment

   We will clarify the criteria for analyzing and evaluating the risks posed by AI systems and the impacts that AI systems may have on individuals, groups of individuals, and society, and establish systematic methods for risk assessments and impact assessments, and carry them out regularly. Based on the results, we will weigh the benefits and risks brought by AI and implement necessary and appropriate balanced measures.

5. Data management and protection of personal information

   We manage the quality and appropriate handling of the data we obtain and use in the development, provision, and operation of AI systems in accordance with our internal policies. We appropriately protect personal information in compliance with the Act on the Protection of Personal Information and other relevant laws and regulations, as well as our privacy policy.

6. Evaluation and management of third-party AI services

   When we use third-party AI services or models, we select and use them after assessing the provider’s reliability, efforts regarding quality and safety, and data handling, and we clarify the allocation of responsibilities with the provider. We also clarify the allocation of responsibilities with customers to whom we provide AI systems.

7. Establishing governance, education, and training

   We establish an AI management structure led by the executive in charge and clarify authority and responsibility related to AI. We also provide regular education, training, and awareness activities so that all employees understand the importance of responsible AI use and can put it into practice, and we maintain mechanisms that allow employees to report concerns about AI.

8. Ensuring transparency and engaging in dialogue with stakeholders

   To enable stakeholders, including users and customers, to properly understand and use AI systems, we provide necessary information—depending on the purpose of use and potential impact—about their functions, intended use, key limitations, and the main risks associated with use. In addition, when an AI system processes or operates on a person’s behalf, we will clearly inform users, as necessary, of what it does and how it can be reviewed or overridden by a human. We will set up a contact point for inquiries and concerns about AI systems.

9. Inspection and audits, and incident response

   We will regularly inspect and audit compliance with the AIMS, and promptly take corrective actions for any deficiencies or improvement items identified. We will also establish response procedures in preparation for AI-related incidents, and respond promptly in the event of an incident.

10. Policy communication, publication, and review

    This policy will be communicated to officers and employees and published on our website. We will review it regularly in light of technological advances and changes in laws, regulations, and the business environment, and update it as needed.

Enacted on October 1, 2026
Rimo LLC
Representative member Naoshi Aikawa