Security & Beta Disclaimer

Jigsaw HousingMatch AI is currently a controlled beta platform using synthetic demonstration data only. The platform is designed to show how AI-assisted decision support can help housing teams shortlist accommodation, identify suitability concerns, structure evidence, manage worklists and maintain audit trails.

The beta does not:

• use real resident data
• store real documents
• perform live council integrations
• use live geocoding
• make statutory suitability decisions
• make fully automated allocation decisions
• replace authorised housing officers
• replace a formal suitability assessment under homelessness legislation

Production deployment for any housing association, local authority, insurer or contractor would require:

• Data Protection Impact Assessment (DPIA)
• Data Processing Agreement (DPA) and sub-processor review
• Role-based access controls (RBAC) for officers, managers, procurement and audit reviewers
• Microsoft 365 / Azure AD SSO (officer authentication)
• Retention and deletion policy aligned with the Controller’s schedule
• Secure document storage with malware scanning and encryption at rest
• Information governance review by the Controller
• Accessibility review (WCAG 2.2 AA)
• Independent security review and penetration testing
• Client-specific configuration (suitability rules, anchors, escalation matrix)
• Legal and procurement sign-off (T&Cs, ISC, KPI/SLA wording)

• All household, property, provider and audit records are synthetic / fabricated.
• Coordinates rendered on the accommodation map are derived from borough centroids with deterministic jitter — they are not real addresses.
• Document upload records capture metadata only. No real document content is stored.
• The login screen is a demo gate; it is not production authentication.
• Real notification emails are sent only for beta-feedback submissions, from noreply@jigsawconferences.co.uk, when the Microsoft Graph integration is enabled. No resident, household, allocation or suitability data is included. All other channels (SMS, push notifications, allocation-related emails) remain disabled in the beta.
• No real LLM calls are made in the current beta. Match explanations are generated by a deterministic engine.

The platform is designed to support compliance with UK GDPR Article 22 expectations around solely automated decisions affecting individuals. Every recommendation is advisory, every officer action is logged to an audit trail, and managers may be required to review allocations that trigger hard-stop suitability rules. In production the Controller (local authority or housing association) retains responsibility for the lawful basis, DPIA, retention, accessibility and information-governance posture; Jigsaw acts as Processor on documented instructions.