Question 1

Does the CDF impose the same audit rules for each company?

Accepted Answer

No, the built-in Adaptive Configuration Engine (ACE) automatically selects the appropriate legal requirements and controls based on the organization's profile, differentiating the approach, e.g. for banks and offices

Question 2

How does CDF differ from a standard IT software deployment?

Accepted Answer

CDF is a proprietary, structured implementation plan that bridges the gap between new legal requirements (e.g. EU AI Act) and technological practice. This methodology forces the organization to build full legal compliance before the start of the solution building phase

Question 3

How many steps does the full implementation of the CDF methodology consist of?

Accepted Answer

The implementation structure includes 8 precisely described phases (from F0 to F6), which cover 12 areas of knowledge and several dozen requirements and control boards

Question 4

What is the Knowledge Freshness Index in the system?

Accepted Answer

It is an advanced indicator operating in the AI Quality Cockpit, which in the production environment constantly analyzes whether the knowledge used by the model is up-to-date

Question 5

How does CDF protect our know-how when building procedures?

Accepted Answer

The platform has a local model (AI Advisor), which gives full data sovereignty – no analyzed documents flow beyond the secure infrastructure of the company

Question 6

Do we have to implement CDF from scratch for each new law (e.g. DORA, AI Act)?

Accepted Answer

No. The authority or company implements the compliance building system only once, and the platform itself generates the relevant evidence and artifacts for the various regulations in force. In the case of new regulations, it may be necessary to update the relevant controls, patterns or artifacts, but this does not mean re-implementing the entire methodology from the beginning

Question 7

Does the system facilitate the implementation of ISO/IEC 42001?

Accepted Answer

Yes, the CDF contains preconfigured records and operational evidence that are necessary to audit and manage AI systems according to this standard

Question 8

How does CDF help demonstrate compliance with the Cyber Resilience Act?

Accepted Answer

The platform natively supports the SBOM (Software Bill of Materials) model and offers ready-made compliance reporting dedicated to the requirements of this legal act

Question 9

How does the platform protect the budget from so-called "eternal pilots"?

Accepted Answer

The system introduces hard decision gates based on the "Scale or Finish" principle at the end of the pilot phase. Thanks to this, projects that only burn through the budget without any chance of final production implementation are effectively eliminated

Question 10

Does CDF really make it easier to pass security audits?

Accepted Answer

Definitely, because the built-in automated evidence package (aims) independently generates key artifacts for auditors. The tool is prepared on an ongoing basis by, among others, the mandatory Register of AI Systems and Data Protection Impact Assessment (DPIA)

Question 11

How do we measure AI reliability in CDF in practice?

Accepted Answer

For this purpose, we use three-level Cognitive SLA indicators, which check the quality of decisions, the level of hallucinations and the freshness of the model's cognitive knowledge in real time, instead of focusing solely on the technical availability of servers

Question 12

Who physically creates the documentation necessary for AI auditors?

Accepted Answer

The Automated Evidence Package (aims) is responsible for this, which independently and on an ongoing basis generates, among others, Impact Assessments (DPIA) and a centralized Register of AI Systems, based on the history of activities in the system

Question 13

What if an employee can't "talk" to artificial intelligence?

Accepted Answer

TWIN:DESK has an integrated Prompt Assistant that helps you formulate commands according to the rigorous, effective CRISPE-CDF prompt engineering standard

Question 14

How can you block the flow of specific files at the stage of uploading them?

Accepted Answer

Documents are immediately marked as confidential, thanks to which the system permanently blocks the option of using them in conversations conducted using external, cloud AI

Question 15

Is TWIN:DESK just a text window?

Accepted Answer

No. TWIN:DESK is a multimodal environment for working with AI: it supports voice commands, analysis of attachments, and also provides a "computer mode", allowing AI agents to independently perform tasks on behalf of the user

Question 16

How does the interface adapt to people with different levels of technical advancement?

Accepted Answer

It uses a gradual disclosure mechanism – beginners see a very simple chat, while experts get full access to the terminal and flow automation options

Question 17

What Polish e-government systems does the platform integrate with?

Accepted Answer

TWIN:DESK enables deep integration with systems such as EZD RP and EZD PUW, as well as with e-Delivery, KSeF 2.0 and ePUAP authentication systems

Question 18

Why is TWIN:DESK more than just another open chat with AI?

Accepted Answer

It is a full-fledged everyday work environment that completely eliminates the problem of lack of institutional memory. It provides secure handling of internal documents or knowledge bases based on rag technology and provides built-in tools for automating tasks and processes

Question 19

How does the “Model Advice” feature improve the quality of our work?

Accepted Answer

This is an innovative mode in which the question asked by the employee goes in parallel to up to five selected AI engines. The platform automatically collects their variants, analyzes them and generates one optimal final response, which translates into higher quality of decisions and greater certainty of the results obtained

Question 20

How can the company control the costs of using artificial intelligence by employees?

Accepted Answer

With this in mind, a virtual budgeting unit called Twin:Coin was created. It allows you to hide highly complex token price lists and facilitates transparent reporting or limiting costs to specific teams

Question 21

Does the assistant in TWIN:DESK suggest actions by itself, or do I always have to give him commands?

Accepted Answer

The system can operate fully proactively – using secure integration with the company's mail, task system or calendar, it automatically generates a daily schedule or proposes summaries of meetings held

Question 22

What happens when AI can't answer a question due to a lack of data?

Accepted Answer

Instead of making up answers (so-called hallucinations), TWIN:DESK uses the Register of Deficiencies in Knowledge. This function marks gaps in the source information, thus giving managers a precise signal as to which internal procedures or instructions need to be urgently supplemented

Question 23

Can I customize the assistant to handle only specific processes of one department?

Accepted Answer

Yes, by creating dedicated workspaces to which you can give a unique avatar, define strict operating guidelines in the system prompte and assign only specialized tools (e.g. code interpreter for the IT department)

Question 24

What is the Cognitive Digital Twin in the system and what is it used for?

Accepted Answer

Digital Twin is a personal AI agent who learns how the user works and uses the accumulated knowledge, documents and history of activities to support everyday tasks. It can help automate repetitive activities, prepare recommendations and implement selected processes, while maintaining the principles of supervision and control specified by the organization

Question 25

What is the (local) computer agent used for in the TWIN:DESK environment?

Accepted Answer

This agent allows you to use your personal sources of knowledge, such as local folders on disk, Outlook mail, Microsoft Teams instant messenger or a private calendar. The biggest advantage of this solution is that artificial intelligence can work on these documents completely locally, without the need to load and copy this sensitive data into a central, corporate knowledge base (rag)

Question 26

What is a PROXY:AI and why does the IT department need to implement it?

Accepted Answer

This software provides a central layer of control, acting as a unified, intelligent router for various artificial intelligence models. It effectively solves the problem of the so-called "Shadow AI", securing the company against sensitive data leaks and uncontrolled costs

Question 27

How does the PROXY:AI protect the budget from deliberately "charging" costs?

Accepted Answer

The tool has FinOps and Anti-DoW mechanisms that set locks for individual tenants and users, protecting, for example, against Denial-of-Wallet attacks

Question 28

What about high-risk business operations?

Accepted Answer

PROXY: The AI operates a “Human in the Decision Loop” mechanism (Human Surveillance), deliberately stopping critical processes until they are authorized by the appropriate person

Question 29

How will we prove to the auditor in the future why the system used a given model?

Accepted Answer

The platform records in the invariable audit log (WORM) the full history of the system operation, including the model used, configuration, call costs and information needed to recreate the decision-making process. Thanks to this, the organization can demonstrate to the auditor what mechanisms led to the choice of a specific AI model

Question 30

How does PROXY:AI control the permissions of autonomous AI Agents?

Accepted Answer

The MCP Gateway module strictly ensures that agents can only use explicitly assigned and allowed tools (e.g. Jira), while maintaining a full audit of their activities

Question 31

Does the PROXY:AI also check what the models generate (on the output)?

Accepted Answer

Definitely yes. Responses returned by the LLM are re-scanned for the presence of unexpectedly generated sensitive data or instructions considered unsafe

Question 32

Can the administrator test the new security rules without damaging the system?

Accepted Answer

Yes, the platform offers a "dry-run" panel that allows you to safely test ABAC rules on simulated traffic before implementing them on production

Question 33

Can the system block the sending of sensitive personal data to the cloud?

Accepted Answer

Yes, the built-in AI Firewall analyzes the transmitted data in real time, less than 50 milliseconds. It automatically detects and neutralizes information such as PESEL numbers, nip numbers and e-mail addresses before leaving the company network

Question 34

How does a PROXY:AI protect against huge inquiry bills?

Accepted Answer

The system effectively uses the Semantic Caching mechanism. Thanks to it, repetitive queries with a similar meaning retrieve ready-made answers directly from the cache, avoiding repeated and expensive polling of the main LLM models

Question 35

How does PROXY:AI protect our AI models from user hacking?

Accepted Answer

It has specialized protective barriers that filter queries in real time and effectively block any extortion attempts, including Prompt Injection or Jailbreak attacks

Question 36

What if a newer AI model appears on the market and we want to switch to it?

Accepted Answer

The system allows for seamless separation from suppliers (Zero-Code Switch), so the organization mentions the main language model by changing only the settings in the PROXY panel:AI, without the need for expensive rewriting of the company's application code. This allows the organization to easily use the new technologies while maintaining control over the costs and risks of migration

Question 37

What is the difference between standard API access and security via ABAC Gateway module in PROXY:AI?

Accepted Answer

This module does not allow blind queries – with each click it analyzes not only who asks the question, but also from what environment it does it, what data it works with and what is the general level of risk of a given operation. Thanks to this, each operation can be dynamically accepted, limited or blocked in accordance with the organization's security policies

Contact us

How we can get started

Demonstration and technical conversation

Proof of Value on your data

Request for proposal and procurement procedure

Partnership and training

Write to us

We are here to help