Questions for the vendor
Please answer each question in writing before the demo.
For every product
What happens to our data? Is anything we put in used to train or improve the product? Where is it stored and processed, and by which subcontractors?
What do you keep, and for how long? Can the product keep what we’re required to keep, delete what we’re allowed to delete and preserve what a legal hold requires?
Who can see what? Does the tool respect the permissions we already have, or can anyone who can type a question see every document it can search?
What can change without our knowing? When the model behind the product changes, do we hear first, and can we test the change before it reaches staff or residents? What happens if that model goes away?
How do we leave? Can we export our documents, settings and history in a format we can use? What does the contract say happens when it ends?
Can we run the demo on our own examples? Including hard ones, such as a scanned resolution from the 1990s or a form filled in by hand.
For meeting minutes
How does it record each action taken and the vote of each member, which the Open Public Meetings Act requires the minutes to show?
What does it do with a vote it couldn’t hear or a speaker it couldn’t identify: flag it, or guess?
Can it leave out a closed session, and how do we check that it did?
Which of the recording, the transcript and the draft does it keep, where and for how long?
Can the clerk edit the draft in our own format before it goes to the board for approval?
For records search
Does every answer cite the document and the page it came from?
How does it handle a superseded version, such as an amended ordinance or a revised resolution?
What does it say when our records don’t answer the question?
Which records does it index, and how does it keep out the ones staff may not share?
Where is the index stored, and who can search it?
For a resident chatbot
How does it tell residents they’re talking to AI, and when?
How does it hand a resident to a person, and how fast?
What happens to the personal details residents type, such as addresses and phone numbers?
Is every conversation kept, and could we produce one in answer to a public records request?
How does it answer a question that belongs to the county or the State?
For AI in office software
Which of our data can it reach: mail, files, chats, calendars?
Are prompts and responses kept, and where would they turn up in a records search?
Can we switch it off for some users, or for some kinds of data?
For a redaction tool
How does it find home addresses Daniel’s Law protects, and the personal details the Open Public Records Act keeps out of a release?
How often does it miss something, and how was that measured?
Does it remove the text itself, so nothing can be copied out of the released file, or only cover it?
Does a person review every redaction before release?
Does it log what was redacted and why, so the custodian can state the basis for each one?