AI Policy

This AI Policy describes how Surf Online("we", "us", or "our") uses generative artificial intelligence (AI) and coding assistants in the development, maintenance, and styling of the Meridian platform.

We use AI coding assistants primarily to help with frontend styling, layout design, visual tweaks, and design consistency across our user interfaces.

All code generated or suggested by AI tools is subject to mandatory human review, verification, and testing before it is merged or deployed to production.

AI-assisted development must undergo the same validation process as human-written code, including automated security scans, linting, unit tests, and integration tests.

To protect the integrity of the Meridian platform, we have a restriction on the areas where AI tools may be used. We do not use AI to generate:

• Authentication and authorization mechanisms, including session management and cookie handling.
• Security-sensitive code or encryption routines.
• Access control policies or key management handlers.
• Data sanitization and platform trust boundaries.

All authentication and security-critical systems are human-written, manually verified, and audited.

We never input customer personal data, database records, API keys, credentials, or production secrets into generative AI tools or public LLM interfaces.

We configure our developer environments and AI assistant configurations to disable telemetry and prevent the training of third-party AI models on our codebase.

We verify that all code generated by AI tools complies with relevant software license agreements and does not introduce incompatible third-party code or licenses into our codebase.