Home › Curriculum › AI across Odoo roles › AI governance, data protection and evaluation

AI governance, data protection and evaluation

Policies, risk assessment, data protection, human oversight and measurement for AI in ERP.

In this lesson

• Policy, register, risk assessment, oversight
• Data protection for AI in ERP
• Measuring and reporting

Key points

• AI use policy, use-case register, risk assessment, human oversight
• NIST AI RMF, ISO/IEC 42001, EU AI Act as references
• Purpose, minimisation, contracts, retention, rights; care with HR/payroll
• Measure accuracy, time, errors, satisfaction, cost; report monthly

Real-world example

A bank-owned distributor wanted AI drafting customer reminders. The risk assessment flagged wrong amounts and tone; controls were draft-only, amounts pulled from Odoo fields not generated text, and weekly sampling. The compliance team approved in a week because the paperwork answered their questions.

Questions and answers

Name two AI governance frameworks.

NIST AI RMF; ISO/IEC 42001 (also EU AI Act for EU obligations).

How long does Odoo 20 keep agent conversations?

Up to 30 days after the last message (per release notes).

Read the full lesson, worked example and quiz