Our commitment
Bora works in cybersecurity, and only in cybersecurity. Our clients are held to a high bar on accuracy, originality, and trust. So are we.
AI is part of how we work. It helps our team research faster, test ideas, and handle production tasks that used to eat hours. It does not write your thought leadership, and it does not make the calls that require judgement. Every piece of work that leaves Bora is shaped, checked, and owned by a person whose name we can give you.
This page sets out where we use AI, where we don’t, and the principles that govern both. We share it openly because you deserve to know how your content is made.
Our principles
Human accountability. Nothing goes to a client on the strength of AI alone. A member of our team reviews, edits, and signs off on every deliverable. If you ever want to know who did what, we’ll tell you.
Human-led thinking. Strategy, positioning, and thought leadership come from people who have spent their careers in cybersecurity. A model can draft a social post. It cannot hold a point of view. Real thought leadership is not something you can borrow from a tool.
Confidentiality. We never put client data, proprietary material, or anything marked confidential into public AI tools. Personal and personnel data stays out of these tools entirely. Where we use AI, we use accounts and settings appropriate to the sensitivity of the work.
Accuracy. Cybersecurity content fails the moment it gets a fact wrong. AI can be confidently, plausibly incorrect. So everything is fact-checked by a human against credible sources, and every source is verified before a brief is finalised.
Originality and IP. We protect your intellectual property and your search performance. Content pulled straight from a generative tool risks being generic, derivative, or worse. Our work is built to be yours, and to demonstrate the experience and expertise that search engines and readers both reward.
Transparency. We’re clear about how we work, on this page and in conversation. We’d rather answer the question directly than leave you guessing.
Continuous review. AI tools and the rules around them change quickly. We review this policy and our practices regularly and update both as things move.
Where we use AI, and where we don’t
We think about AI in three modes.
AI-led work is production support: routine, technical tasks where AI handles the bulk and a person checks the output.
AI-assisted work is where AI supports a person who shapes, edits, and owns the result. It might generate options or a starting point. The thinking, the judgement, and the final version are ours. Anything drafted this way is reviewed and reworked by our team before it reaches you.
Human-only work is everything that depends on expertise, context, and relationship. Strategy. Thought leadership. Fact-checking. Every final sign-off. These are the parts of the process where a model cannot stand in for a practitioner, so it doesn’t.
TL;DR: AI helps us produce. It does not replace the people you hired us for.
What this means for you
You get content made by cybersecurity specialists, supported by AI where that genuinely improves the work, and never at the expense of quality or confidentiality.
At the start of every engagement, we’ll talk through your own AI preferences. Some clients have firm policies on where AI can and can’t be involved. Some want none of it near certain assets. We record your preferences and work to them.
On AI-detection tools: these scores are probabilistic and produce false positives, so we don’t treat them as proof of anything. If authorship is ever questioned, we’ll walk you through our research, drafting, and QC process instead.
If you have a question this page doesn’t answer, ask us.
Security and certification
Bora Design SL holds Cyber Essentials certification, the UK government-backed scheme developed by the National Cyber Security Centre and delivered by IASME. It covers five baseline technical controls: firewalls, secure configuration, security update management, user access control, and malware protection. Certification is renewed annually.
Cyber Essentials is a recognised baseline of good cyber hygiene. It sits alongside the confidentiality practices described above as part of how we protect client information.
Certificate number: 9c7846ba-4150-49f2-9fca-e2741478581a. Valid to: 2026-07-16.
Last updated: 2026-07-29. We review this policy regularly.
