How We Use AI Responsibly
We're open to AI and use it where it helps, as one tool among many. We don't rely on it. Engineers make the decisions, review the work and stand behind every delivery, and your code and data stay yours.
How Does Infra8 Use AI?
Infra8 uses AI as one of several tools, mostly to speed up routine work like drafts, reviews and checks. We don't rely on it: engineers make every decision, review every change and stay accountable for the result. Your code and data stay in your accounts, and you can ask us to work with or without AI tools.
Common Questions About AI and Your Data
Short, honest answers for founders, CTOs and security teams.
Is our code used to train AI models?
No. We only use tools on business terms that exclude training on your code, and we share the list of tools used on your project so you can review it.
Where does our data go?
Customer data stays in your accounts. We keep production data, secrets and credentials out of any AI tool.
Who is responsible for the code?
We are. Every change is reviewed by a senior engineer and has to pass your tests before it merges, whatever tools helped along the way.
Can AI change our production systems?
No. Changes go through your pipeline with a human approval. A tool can suggest a change; only a person can deploy one.
Where AI Can Lend a Hand
In both services, AI can help with routine drafting and checking so senior engineers spend their time on decisions.
In development
- Scoping: a starting list of features and open questions from a brief, which an engineer refines into the estimate.
- Code review: an extra set of eyes on pull requests, in addition to a senior engineer's review.
- Tests: drafts of unit tests for new code, which an engineer checks and completes.
- Documentation: keeping READMEs and handover docs current as the code changes.
In cloud operations
- Infrastructure checks: misconfigurations, open ports and public storage flagged early.
- Cost checks: idle and oversized resources surfaced for the monthly review.
- Infrastructure as code: a second look at Terraform and pipeline changes before review.
- Incident notes: timelines drafted from logs, for an engineer to confirm and act on.
Engineers Decide. Tools Assist.
Tools can draft and flag. Engineers decide, approve and ship.
| Task | Where AI can help | What engineers do |
|---|---|---|
| Scoping | Drafts features and open questions | Sets the scope, price and timeline |
| Code review | Adds an extra set of eyes | Reviews and approves every change |
| Testing | Drafts unit tests | Checks coverage and edge cases |
| Infrastructure | Flags misconfigurations and waste | Decides on and applies the fix |
| Production | No access | Approves every deploy |
The Guardrails We Keep on Every Project
Speed only matters if you stay in control of your code, your data and your cloud.
Human review on every change
Nothing merges without a senior engineer's approval.
Secrets and customer data stay out
Keys, credentials and production data never go into AI tools.
Tools by agreement
A short list of vetted tools, written down for each project. No project depends on any one of them.
Least-privilege access
Access to your cloud is scoped, logged and revocable at any time.
Everything in your accounts
Code, pipelines and infrastructure live in accounts you own.
Your choice
If your policy rules out AI tools, we work without them. If you want to use them, we're glad to talk it through.
A short list of vetted tools for coding, review and checks. The list for your project is written down at the start and shared with you.
It is held to the same bar as any other code: senior review, tests and dependency scanning before it merges.
It can make some routine work faster, like drafts, reviews and tests. We don't promise savings from it: the scope and price you get in writing are what you pay.
Yes. If your security policy rules out AI tools, we work without them. If you'd like to use them, we're happy to talk it through.
Our guardrails, like access control, review and logging, support the controls auditors look for. We prepare the infrastructure and documentation; an accredited auditor certifies it.
Where This Shows Up
Tell Us Where Your Product Is. You'll Hear Back in 24 Hours.
- Fixed scope
- You own everything
- NDA on request