Locked policy

Locked 21 Oct 2026, 11:31

Customer complaints policy: use of AI (v3)

The bank's complaints policy, seeded for this demo. New requirements are checked against it.

  1. P1AI tools may help customers describe and submit a complaint, but must not decide the outcome of a complaint or promise any redress. Outcomes are decided by a human case handler.
  2. P2Customers must be told at the start of every conversation that they are talking to an AI assistant, and must be able to reach a person at any point.
  3. P3Where a conversation shows signs that a customer may be vulnerable, for example bereavement, serious illness or financial hardship, the case must be passed to a person in the same session.
  4. P4Every complaint must receive a written acknowledgement with a complaint reference within one working day, sent from the case management system.
  5. P5Customer personal data may only be processed by AI models hosted in the UK or EU, and must never be used to train models.
  6. P6All AI conversations about complaints are retained for six years for audit.

Who agreed

  • Daniel Okafor (Head of Complaints Compliance) Approved
  • Grace Lindqvist (Chief Operating Officer) Approved
  • Marcus Bell (Chief Information Security Officer) Approved