AI governance
What we do, and how you can check it.
Japan’s Ministry of Economy, Trade and Industry (METI) and Ministry of Internal Affairs and Communications (MIC) publish the AI Guidelines for Business (v1.2, March 2026). We use them as a reference when designing Hakoteca. Below, each principle is matched with the feature that addresses it, so you can verify it yourself rather than take our word for it.
Last updated: 4 November 2026
The guideline principles, and what Hakoteca does about each
| Principle | In Hakoteca |
|---|---|
| Human-centric | The AI prepares the information; people decide. Answers cite their sources so staff check before relying on them. Suggested starter questions for each role help staff use it for the tasks it suits. |
| Safety | Hakoteca cannot change records or take actions in your systems. Database connections are read-only, and every query is limited in rows, size and time. |
| Privacy | The AI models run inside your office; no question, document or answer goes to a cloud AI. Conversation history is private to each person. When a document is permanently erased, old answers stop showing it. |
| Security | Access to each document collection, lookup and administration right is granted by role and enforced on the server. Lookup code runs isolated, with no access to the network or to credentials. Connection passwords are stored encrypted. |
| Transparency | Every answer cites its sources: the document and page for facts taken from documents, and the lookup and its result for facts taken from records. The AI models are open-weight and run locally. |
| Accountability | An append-only security audit log that administrators can review and export to CSV. A privacy overview page shows administrators the privacy-relevant configuration. |
Support access only when you allow it
Our engineers have no standing access to your server. When maintenance or support needs access, you approve it, it is limited in time, and it ends automatically. Your data stays under your control, including when we help.
Your part as the organisation using AI
The guidelines also give responsibilities to organisations that use AI: deciding what it is used for, training staff, checking its output and managing the data it sees. Hakoteca gives you the means: roles, starter questions, citations, the audit log and the privacy overview. We can help you document how your organisation uses it. No product can make an organisation follow the guidelines on its own.