AI at Discontinue – Transparency

We currently use the Claude models from Anthropic (Anthropic PBC, USA) via their API. Our platform is technically built so that it could also address other AI providers (see “Dynamic model routing” further below). At present, however, only Anthropic is in use. Every new provider is reviewed in advance and announced as a sub-processor before it is put into use.

AI helps you get to the analyses and workflows you need more quickly. Specifically, we use AI for four things:

• Reading data and acting: The Platform provides granular, configurable tools. By default the AI accesses your data from the connected systems (e.g. a property management system) read-only; write operations only after approval or explicit opt-in. Which tools an agent uses is determined by your configuration – we limit each agent to what its task requires.
• Structuring reports: From your data, the AI shapes clearly presented reports.
• Composing messages: Your agents compose their communications (e.g. by email or via chat/messaging services you have connected) in natural language.
• Configuring agents: You set up your reports and agents in natural language – the AI helps translate your description into a working configuration.

Important: the actual metrics (e.g. ADR, RevPAR, occupancy) are not “estimated” by the AI, but calculated deterministically in our KPI glossary – that is, according to fixed formulas in Python. The data values come from your connected source system (live data). The AI element lies in the structuring and wording, not in the figures themselves.

• No autonomous decisions. The AI does not decide anything on its own about your operation, your guests or your employees.
• No unauthorised alteration of your data. You determine what an agent may do in the first place: every permission (scope) and every tool is set separately in the permissions of the respective agent. In addition, write operations into the connected systems by default go through an approval queue: a person you designate approves each operation individually (human-in-the-loop). Only if you explicitly activate the opt-in for an individual agent will that agent execute its write operations without individual approval — even then, the AI does not act autonomously but on the basis of your explicit, revocable consent and only within the permissions you have set. Every operation remains fully logged.
• No automated decision-making about persons. No automated decision within the meaning of Art. 22 GDPR takes place.
• No training with your data. Your data is not used to train AI models (see the next section).
• No evaluation of persons. We do not offer any templates that evaluate, rank or “score” guests.

Your data also remains strictly separated from that of other hotels (tenant isolation).

Our platform can, in principle, address different AI models and select the most suitable one in each case. This keeps us technically flexible.

Today, everything runs through Anthropic. Should a further provider be added in future, we review it carefully beforehand – in particular with regard to data protection and the guarantees described below – and add it properly to our list of sub-processors before it is put into use. This may include locally or self-hosted models or other providers. Such a switch does not change your safeguards (no training with your data, only short-term storage or equivalent).

• No-training guarantee: Your data is not used to train AI models.
• Limited storage: The model provider stores transmitted content only briefly (no more than 30 days, exclusively to detect abuse) and deletes it automatically afterwards.

For the transmission to Anthropic in the USA, we rely on the intended legal safeguards: EU Standard Contractual Clauses and a Transfer Impact Assessment. You can find details in our Privacy Policy and in the Data Processing Agreement (DPA).

So that you always recognise AI content as such, we mark it at every relevant point:

• In the chat interfaces (report generator, agent onboarding, agent editing), a permanent label indicates that you are talking to an AI assistant, e.g. “AI-assisted – You are talking to an AI assistant”.
• Below every report (by email, via connected chat/messaging services or as a file download) there is a note: “This report was generated automatically. The data basis comes from the connected source system. AI can make mistakes when structuring – please verify critical figures.”
• Agent messages carry the note “AI-generated”.
• Previews of configurations (blueprint previews) are marked with “Generated by the AI assistant”.

For every agent run, we record a complete run trace – that is, a traceable record of what happened (which data was read, which tools were called with which parameters, and how the report was assembled). For this we use Langfuse (Langfuse Cloud, EU region); processing takes place in the EU.

This way you can always understand how a result came about. We retain these traces for 12 months, after which they are anonymised or deleted.

AI systems can be wrong, especially in structuring and wording. Please verify critical figures before basing important decisions on them. You recognise AI content by the markings described above, e.g. in the report footer or by the marking of agent messages.

Did you notice something? Feel free to report it to us – we follow up on every notice:

• Email: office@discontinue.dev

How we handle personal data is explained in our Privacy Policy and the Data Processing Agreement (DPA). We answer questions about data protection at:

• Data protection: datenschutz@discontinue.dev

• General enquiries: office@discontinue.dev
• Data protection: datenschutz@discontinue.dev