Roles, Responsibilities & Regulatory Notices
Last updated: August 2026
EVE is governance infrastructure — the customer is the decision-maker
EVE AI Core provides deterministic governance enforcement, signed decision evidence, and audit support for AI systems. EVE does not make credit, insurance, clinical, employment, or other regulated decisions. The customer that deploys EVE remains the controller and the regulated decision-maker, and is solely responsible for its own legal, regulatory, and policy obligations, including model-risk governance, configuration of policy packs, and the correctness of its decisions.
Consumer lending (FCRA / ECOA)
Where EVE governs lending or credit workflows, EVE is not a consumer reporting agency as defined in the Fair Credit Reporting Act, 15 U.S.C. § 1681a(f). EVE does not assemble, evaluate, generate, or furnish consumer reports or credit scores, and its governance outputs (for example, policy verdicts and signed evidence) are not consumer reports and are not "furnished" information within the meaning of the FCRA. The creditor customer retains sole responsibility for FCRA permissible purpose, accuracy and dispute handling, and for compliance with the Equal Credit Opportunity Act and Regulation B, including any adverse-action notice and the statement of specific reasons for a decision.
Healthcare
EVE is not a covered entity and, where it processes protected health information on a customer's behalf, acts only as a business associate under a signed Business Associate Agreement. EVE does not provide medical advice, diagnosis, or treatment and is not a substitute for professional clinical judgment.
Insurance, government, and other regulated use
For insurance underwriting and rating, government use, and other regulated contexts, the customer remains responsible for compliance with the applicable rules of its jurisdiction and regulator. EVE provides infrastructure and evidence; it does not certify compliance.
No reliance; no professional advice
EVE's outputs are provided for informational and governance purposes and must be validated within the customer's own compliance and risk framework. They are not legal, financial, medical, or regulatory advice, and are not a guarantee, certification, or warranty of compliance. See our Terms of Service and Disclaimer.
Contact
Compliance and regulatory questions: legal@eveaicore.com.