Code of Conduct clientConditionalConditionalConditionalConditionalConditionalConditionalConditionalConditionalConditionalNot permitted
Boehringer Ingelheim
Controlled — EU AI Act Aligned
Boehringer's requirement is short and direct: AI use has to align with the EU AI Act, and it must never be manipulative, discriminatory, or otherwise unethical — full stop, regardless of whether the work is EU-facing.
Key requirement — Boehringer expects AI use aligned with the EU AI Act's principles — safety, human oversight, transparency, fairness, reliability, and security — everywhere, not just for EU-facing work. Article 5's prohibited practices are an absolute line, not something to seek an exception to.
Permitted
- AI tools meeting EU AI Act requirements
- GDPR-compliant data processing only
- LynxAI (enterprise, EU data residency where possible)
Not permitted
- Processing personal data without GDPR compliance
- Any AI use falling under the EU AI Act's Article 5 prohibited practices (manipulative, exploitative, or discriminatory use)
- Non-enterprise or consumer-tier AI tools
Tool-by-tool approval
LynxAI
GDPR + EU AI Act compliance
AVA
GDPR + EU AI Act compliance
Microsoft Copilot
GDPR compliance required
NotebookLM
GDPR check required
Vermeer
Disclose AI imagery per EU AI Act
Vurvey
GDPR + EU AI Act compliance
ElevenLabs
GDPR + EU AI Act compliance
HeyGen
GDPR + EU AI Act compliance
Runway
GDPR + EU AI Act compliance
Consumer AI
Not approved for client use