Skip to the main content

Trust & compliance

How Kaza uses AI

Where a model helps, where it is deliberately kept out, and why nothing about a person is decided by one.

Last updated 28 July 2026

The rule everything else follows from

No decision about a person is made by a model. Approving or declining an application, setting a rent, serving a notice, deciding a deposit, a person decides, and their name goes on the record.

Kaza summarises and drafts. It says plainly when a draft is a draft, and a draft is never presented to an applicant as though it were an answer.

Where it is actually used

  • Drafting replies to enquiries, from facts read out of your own records, never invented. Your staff read it before it goes.
  • Drafting listing text for a home, which you then edit.
  • Summarising a long application or thread so somebody can get to the point faster.

Where it is deliberately kept out

  • The compliance engine. Whether a deposit or a rent increase is lawful is decided by compiled rules with statutory citations, not by a model. A model that is usually right about the law is a liability, not a feature, and when a rule goes stale the engine refuses to answer rather than guessing.
  • Screening outcomes. No scoring, no ranking of applicants, no recommendation about who should get a home.

Where the model runs, precisely

On Cloudflare’s own network, through a platform binding, not by calling an outside AI company’s API. There is no OpenAI key, no Anthropic key and no Mistral key in Kaza, because there is nothing to send them to.

One thing worth explaining before somebody finds it and misreads it: the models are named things like @cf/openai/gpt-oss-20b and @cf/mistralai/mistral-small-3.1-24b-instruct. Those are open-weight models published by those labs and hosted by Cloudflare. The name is the model’s origin, not a destination your data travels to.

Nothing is used to train anything.Not your data, not your applicants’, not ours.

The legal position, honestly

Canada currently has no AI statute in force. The Artificial Intelligence and Data Act died with Bill C-27 when Parliament was prorogued in January 2025, and the privacy bill introduced in June 2026 is only at first reading. So none of the above is compelled by law today.

It is how Kaza is built anyway, because the alternative, a model quietly deciding who gets a home: is the kind of thing that becomes illegal eventually and is indefensible immediately.

How Kaza uses AI · Kaza