The company

Islands AI Ltd is registered in Guernsey, company number 74458. Registered office: 2 Market Street, St Peter Port, Guernsey GY1 1HB. We build and operate AI systems for regulated and operationally complex organisations, which means we hold ourselves to the standards our clients are held to.

Security

Our security posture, including infrastructure, subprocessors and their certifications, data residency options and responsible disclosure, is published in full in our security statement.

Security statement ›

Our policies

Islands AI operates a formal policy framework. Summaries of the most requested policies are published below; The full policy pack (ten policies including Health and Safety, Whistleblowing, Business Continuity and Quality) is available to clients and prospective clients on request.

Data protection policy (summary)

Islands AI processes personal data lawfully, fairly and transparently under the Data Protection (Bailiwick of Guernsey) Law, 2017. We collect the minimum data needed for a stated purpose, retain it only as long as necessary, secure it appropriately, and honour data subject rights without obstruction. Client engagement data is processed under contract and, where required, a data processing agreement. Our full privacy statement describes exactly what we collect and why.

Information security policy (summary)

Access to systems and client data follows least privilege, protected by multi-factor authentication on administrative accounts. Data is encrypted in transit. Credentials are managed through controlled secrets handling, never shared in plain text. Changes to production systems go through version control with a full history. Incidents are contained, assessed, and where they affect a client or individuals, reported to them promptly.

Anti-bribery and corruption policy (summary)

Islands AI does not offer, give, solicit or accept bribes or improper inducements in any form, directly or through third parties. Gifts and hospitality are modest, proportionate and never tied to a decision. We comply with the Prevention of Corruption (Bailiwick of Guernsey) Law and the UK Bribery Act where it applies to our work.

Modern slavery statement (voluntary)

Islands AI is below the turnover threshold that mandates a statement under the UK Modern Slavery Act 2015; we publish one anyway. We do not use forced, bonded or child labour, we pay fairly and promptly, and we expect the same of our suppliers. Our supply chain is short, principally established technology providers, and we review it as the business grows.

Equal opportunities and diversity policy (summary)

Recruitment, engagement and day-to-day conduct at Islands AI are free from discrimination on any protected ground. We assess people and suppliers on capability and conduct, and we expect respectful behaviour from and towards everyone we work with.

Environmental policy (summary)

Our footprint is deliberately small: a largely remote operation, efficient serverless infrastructure, and minimal travel. We prefer energy-efficient providers, recycle responsibly, and consider environmental impact when choosing suppliers and designing systems.

Responsible AI

Every system we build carries three commitments by design. A named human remains the approver of consequential outputs; AI drafts and assembles, people decide.

Every action is logged with its data trail, so any decision can be explained to a board, an auditor or a regulator afterwards. And data flows are documented and minimised, with on-island and on-premise deployment available where data must not leave your environment.

We publish this because we are asking clients to hold us to it.

Certifications and roadmap

Our production infrastructure runs on providers holding independent certifications including SOC 2 and ISO 27001 (see the security statement for the register). Islands AI itself is a young firm and we are honest about that: we operate the controls above today, evidence them on request, and add formal certifications as the business scales.

Vendor due diligence

If you are evaluating Islands AI as a supplier: a completed security questionnaire (SIG Lite format), our data processing agreement, and the full policy pack are available on request. We aim to turn due diligence requests around within five working days. [email protected].

Trust centre.