Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Mercury uses AI and machine learning for fraud detection, credit application evaluation, document verification, and transaction categorization, and that decisions with legal consequences, financial implications, or material effects on service access always include human oversight rather than being made by AI alone.
This analysis describes what Mercury's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes Mercury's stated operational safeguard against fully automated consequential decision-making, which is relevant to GDPR Article 22 requirements for EEA users and to emerging U.S. state automated decision-making regulations; the policy does not specify the mechanism or documentation standard for human oversight.
Interpretive note: The policy does not specify the operational mechanism or documentation standard for 'appropriate human oversight,' and the extent to which this commitment satisfies GDPR Article 22 or U.S. state automated decision-making requirements depends on jurisdiction-specific enforcement interpretation.
Under this provision, credit application evaluations and other decisions materially affecting service access involve human oversight as stated by Mercury; however, the policy does not describe a formal right to explanation or contest automated decisions beyond the general privacy rights outlined in Section 9.
Cross-platform context
See how other platforms handle AI-Assisted Decision-Making with Human Oversight and similar clauses.
Compare across platforms →Monitoring
Mercury has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We use artificial intelligence ('AI') and machine learning technologies to enhance security, streamline operations, and deliver personalized, efficient services for our customers. We may apply these tools to analyze information we collect for purposes such as verifying documents, categorizing businesses, detecting fraud, supporting customer service, evaluating credit applications, categorizing transactions, and other legitimate functions. While AI helps us work faster and smarter, we do not rely on it alone to make decisions that could have legal consequences, financial implications, or otherwise materially affect your rights or access to our services. Such decisions always involve appropriate human oversight.Excerpt from Mercury's Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages GDPR Article 22, which restricts fully automated individual decision-making that produces legal or similarly significant effects, and requires that such decisions involve human review upon request. For EEA users, Mercury's stated human oversight policy aligns directionally with Article 22 but compliance teams should assess whether Mercury's processes meet the full Article 22 requirements including the right to obtain human intervention, express a point of view, and contest the decision. The EU AI Act's provisions on high-risk AI systems in credit and financial services may also apply depending on Mercury's operational jurisdiction. The CFPB's guidance on algorithmic credit decisions and adverse action notice requirements under the Equal Credit Opportunity Act (ECOA) and Fair Credit Reporting Act (FCRA) are relevant to AI-assisted credit application evaluation. 2) GOVERNANCE EXPOSURE: Medium. The policy's statement that AI-assisted consequential decisions 'always involve appropriate human oversight' is an operational commitment without a defined mechanism or audit trail described in the document. Compliance teams should assess whether this commitment is operationally documented and whether adverse action notices for AI-assisted credit decisions comply with ECOA and FCRA requirements. 3) JURISDICTION FLAGS: EEA users have GDPR Article 22 rights to human review of automated decisions. U.S. users subject to FCRA and ECOA have adverse action notice rights when credit decisions are made using automated tools. Several U.S. states including Colorado have enacted or proposed automated decision-making regulations that may require additional disclosure or opt-out rights. 4) CONTRACT AND VENDOR IMPLICATIONS: Mercury discloses AI use for evaluating credit applications, which may involve third-party AI vendors or credit assessment tools. Procurement and vendor management teams should assess whether AI vendor agreements include fairness monitoring, audit rights, and adverse action documentation consistent with ECOA and FCRA obligations. 5) COMPLIANCE CONSIDERATIONS: Legal teams should document the human oversight mechanism for AI-assisted credit and account access decisions to support regulatory examination readiness. Adverse action notice procedures should be reviewed for alignment with FCRA and ECOA requirements when AI tools contribute to credit denials. The policy's statement that AI systems are 'regularly monitored for fairness, accuracy, and security' should be supported by internal audit documentation.
This provision establishes Mercury's stated operational safeguard against fully automated consequential decision-making, which is relevant to GDPR Article 22 requirements for EEA users and to emerging U.S. state automated decision-making regulations; the policy does not specify the mechanism or documentation standard for human oversight.
Under this provision, credit application evaluations and other decisions materially affecting service access involve human oversight as stated by Mercury; however, the policy does not describe a formal right to explanation or contest automated decisions beyond the general privacy rights outlined in Section 9.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mercury.