AI ASSURANCE PLATFORM FOR CONSUMERS AND ORGANIZATIONS

Authorized Agent Agreements

Here, we explain what it means to authorize PrivacyPortfolio as your personal agent.

How to Subscribe to the Authorized Agent Agreement Service

  1.   Send an email to authorized-agent@privacyportfolio.com.
  2.   You will receive an auto-reply with all the necessary instructions.
  3.   An Authorized Agent Agreement template will be generated, which requires notarization to confirm your identity and signature.
  4.   You will also need to get a personal Dropbox account and configure a Shared Folder where we can access your personal information and deliver documents, reports, audit logs, and other information related to requests made by you or your team of dedicated AI Agents working on your behalf.
  5.   Go to our payment portal to enter your billing information and purchase the Authorized Agent Agreement subscription.
  6.   A dedicated Data-Steward Agent will be assigned to work exclusively on your behalf to fulfill your requests and manage the responses, protect your personal information in your shared Dropbox folder, and use it only for the purposes you specified in your Authorized Agent Agreement.
    (See the section below on "Modifying Your Authorized Agent Agreement")

 

Instead of actually reading your subscription feed and taking actions on your own (which you can do at anytime), you can delegate this to your team of agents assigned to act on your behalf in the Yo-ai Platform.
Your team of dedicated Yo-ai Agents can assess whether Organizational Profile changes or Platform Notifications significantly alters your risk posture, and takes appropriate actions based on automated decisions your agents make for you in accordance with your policies and instructions.

Modifying Your Authorized Agent Agreement

Your notarized Authorized Agent Agreement authorizes PrivacyPortfolio, LLC to represent your interests by making decisions and taking actions with organizations on your behalf. This may seem overly broad, but it satisfies the legal threshold requirement to represent you and to verify your identity. There isn't any way to specify in advance, all the specific fine-grained authorized consents when the agreement is notarized.

At this point, you haven't asked your authorized agent to make any decisions or take any actions.
When you do submit a request to the Solicitor-General via your dedicated Data-Steward, it is added as an addendum to your Authorized Agent Agreement. We maintain a synchronized copy of this Agreement, notify you, and put an updated Agreement in your Shared Dropbox Folder.
If we cannot access your Shared Dropbox Folder, the entire Agreement becomes null and void. We will no longer have access to your personal data.

We provide you with audit events from our Dropbox account each time we access your personal information. You can inspect these events to learn what we accessed, who we shared the information with, and for what authorized purpose.

Terminating or Revoking Your Authorized Agent Agreement

There are three ways to terminate or revoke your Agreement:

  1. Email authorized-agent@privacyportfolio.com or responsible-human@yo-ai.ai with your request. Save this email for your own records.
  2. Remove the Data-Steward's access to your Shared Folder on Dropbox.
  3. Submit a privacy request to cancel your subscriptions and delete your personal information, including your billing information which will prevent any recurring charges.

 

This action will also remove you from the Stakeholder Registry. You can always re-register at a later time, however you will not be able to use the same email address.

Registered Stakeholders who choose to authorize PrivacyPortfolio as their authorized agent, sign a notarized Agent Authorization Agreement and pay $28.00 USD per month or $120.00 USD per year.

Setting Expectations

What do I get each month as an Authorized Agent Agreement subscriber?

PrivacyPortfolio, acting as your authorized agent, operates a dedicated team of AI Agents to make decisions and take actions on your behalf.

This service differs from Yo-ai Platform Users who are licensed to operate their own dedicated team of AI Agents, have credentials to log in to their Yo-ai Platform tenant, and have greater flexibility to use interoperability with other AI Agents outside of the Yo-ai Platform, and can choose other authorized agents to represent them through impersonation on the Yo-ai Platform.

As an Authorized Agent Agreement subscriber, you are entitled to 100 requests each month.

As an Authorized Agent Agreement subscriber, you can make and manage your own requests, but knowing what to ask and how to ask it is what our team of AI Agents do best. This is why it's worth expressing preferences in your personal profile -- it generates operational policies that our team of AI Agents can use to make decisions and take actions autonomously.

For Organizations

Employees are consumers, too!

Yo-ai's Privacy Preferences enable you to control who your identity and personal information is shared with.

By setting your own policy and seeing your personal Data Steward implement it, you'll find out how Yo-ai works for all registered stakeholders.

When a consumer uses Yo-ai to generate requests, create online accounts, or initiate transactions or agreements with your organization, these activities are legally authorized by the consumer.

Likewise, when a consumer uses Yo-ai to monitor and/or verify an organization's activities or change in its profile, the consumer is exercising their right to know if promises the organization makes are kept.

Organizations, and its employees or representatives -- which includes AI Agents, are also able to correct information or register concerns with the Vendor-Manager agent Yo-ai assigns to represent you as an organization.

Let's use this as an example:
You are the Privacy Officer or General Counsel who represents an organization we'll call ZYX Corporation.
You subscribe and pay for the Authorized Agent Agreement subscription as an individual Consumer, just like everyone else.
Now we can verify your identity, but we cannot verify if you are authorized to represent ZYX Corporation.
We need an affidavit signed by another corporate officer, or a registered agent declaration filed with the State where ZYX is incorporated.
Now, you have the necessary credentials to modify the Organization's Profile, via the Vendor-Manager agent. (We won't ask you for a copy of your Driver's License.)
All Registered Stakeholders who subscribe to ZYX Corporation's profile updates, will see that an authorized company officer has modified the profile. They will not be able to learn from Yo-ai who that person is, including their job title. They have a job to do, that doesn't include personal invasions of their privacy.

The purpose of a Registered Stakeholder modifying the profile of the Organization they represent, is to enable them to view their organizations' impact on consumers and take remedial action as they see fit, which includes countering misinformation.

For Regulators

Anyone who works for a regulatory agency may also register as a stakeholder, Authorized Agent Agreement subscriber, or licensed Platform User. Like the example provided above for consumers who represent organizations, staff members are also employees/consumers.

Government agency employees typically have strict prohibitions on accessing personal information and engaging with individuals and entities, and legal matters that could potentially create conflicts-of-interest. They could access organization profiles (which includes references to all complaints) that are published in Yo-ai's public data catalog without being registered as a stakeholder. They could subscribe to specific organizations or topics as a Registered Stakeholder, that they might also have an interest in as an agency employee.

We're not encouraging employees of regulatory agencies or organizations to circumvent systems and processes. If agencies have the appropriate jurisdiction, they have subpoena power, they can conduct investigations and audits, and their access to information dwarfs anything discovered on the Yo-ai Platform.

As a transparent zero-trust assurance platform, Yo-ai is "audit ready" 24x7. Regulators may want to know if the information disseminated by the Yo-ai Platform is timely and accurate. They might wonder if PrivacyPortfolio is engaged in non-compliant or illegal activity. They might be curious as to how their performance as an enforcement activity compares with complaint-management and remediations initiated by Registered Stakeholders on Yo-ai.

PrivacyPortfolio will disclose (via The Sentinel in Yo-ai) access requests received from law enforcement or other regualtory agencies to the degree that we are able to do so without breaking the law.

For Consumers

The Yo-ai Platform is designed to protect the personal information and the identity of Registered Stakeholders. According to our Code of Conduct, disclosing the personal information of individual consumers, including yourself, is a prohibited activity.

Registered Stakeholders who have Authorized Agent Agreements with PrivacyPortfolio are empowered to control the use of their personal data by making reasonable requests to organizations, exercising their privacy rights, conducting risk and impact assessments, and filing complaints when laws are broken, policies are not complied with, and when promises are not fulfilled.

PrivacyPortfolio must provide written authorization from Registered Stakeholders whose identities can be verified by the organizations PrivacyPortfolio is authorized to engage with. This written authorization includes a Non-Disclosure Agreement. A common practice among businesses is to disclose certification reports and other security, privacy, and compliance documentation on the condition it is not shared with any entity other than the organization it was disclosed to. Now, as a consumer, PrivacyPortfolio can enforce this as your personal authorized agent.

Assess Your Risk

 

Yo-ai helps consumers determine their exposure to risk and do something about it.

 

Yo-ai helps organizations determine if they are exposing their stakeholders to risk and what Registered Stakeholders are doing about it.