HR data touches people's jobs, pay and careers. That is why we define AI not only by what it does but also by what it does not do.
The principles below describe how IKSAP's AI assistant IKSir works today; each product page gives the details.
Six principles
Human approval.
AI proposes, people decide. IKSir prepares changes as proposals; it never writes to live data on its own.
Permissions stay at the source.
Every question is answered with the permissions the person asking has in the source system. AI opens no new access and cannot change identity or permissions.
Personal data is protected.
Only the data that is needed reaches the AI. Names are pseudonymized; calculations run inside the source system.
The model is your choice.
The large language model runs on your own server or on a global service you choose. What data reaches the model is stated clearly.
No made-up answers.
If information is missing it says why: you lack permission, it is not kept in the system, or it has not been entered.
Traceable.
Changes made through IKSir are marked separately in the change history and can be undone in one step.
Which data goes where?
| Product | What reaches the AI | What is stored |
|---|---|---|
| IKSir in HieraChart | Names as pseudonyms; no raw employee list. Email, phone, employee ID, hire date and seniority are never sent; pay, health and union data cannot be enabled by any setting. | Conversations are stored encrypted and deleted after a set period (30 days by default). |
| IKSir in SuccessFactors | The question and the data read with the permissions of the person asking. With an in-house model no data leaves the organization; with a global model this data goes to that service. | Employee data is not stored in IKSir; web chats stay only in the browser tab, Teams chats stay in Teams. |
In practice: restructuring in HieraChart
- 1
Proposal
The user describes the change in one sentence; IKSir prepares a proposal card.
- 2
Review
Affected boxes are marked in the chart; the user removes any line they do not want.
- 3
Approval
The change is written only with “Apply” and only to a draft version; the live chart does not change.
- 4
Undo
It is undone with a single “Undo”; the change history marks it as “via AI.”
Compliance
Personal data is processed in line with KVKK, Türkiye's personal data protection law, and, for customers in the European Union, the GDPR. We follow developments under the EU AI Act.
Frequently Asked Questions
Does the AI make decisions?
No. IKSir answers questions and proposes changes; the decision to apply a change always stays with the user.
Does our data leave the organization?
You choose the language model. With an in-house model data does not leave; with a global model, the product page states exactly which data is sent.
Can the AI show data I cannot see?
No. Every question is answered with your permissions in the source system; if you lack permission, IKSir says so clearly.
Let's discuss our AI principles for your environment.
Let's review your use cases, data and permission setup together.