Safety standards

The technology behind Puko, and how it is built for children.

Puko's AI runs on Tuya's platform. This text is our own summary of the Tuya AI Toy Compliance White Paper v1.1. The certifications belong to Tuya, not Puko.

Safety from start to finish

Tuya describes safety across the whole life of the product: risk assessments in design, fixed rules during development, testing before release, limits in use and deletion when the product is finished.

What the AI may and may not do

• Violence, pornography, self-harm, drugs, hate and discrimination are blocked.
• No medical or legal advice.
• No dangerous instructions and no pressure on children.
• The rules are locked and cannot be changed by users or on the plush.
• Inappropriate questions are filtered before they reach the language model, and the child gets a safe answer.

Testing and control

According to Tuya, the system is tested for sensitive content and attempts to get around the rules, with human testing and ongoing control.

Children

• An adult must approve before the plush is used.
• Long conversations are interrupted, and children are encouraged to play in real life.
• No addictive rewards.

Data

• Raw audio is not stored.
• Conversation data is encrypted and only kept for a limited time.
• Children's data is not used to train AI or for advertising.
• Adults can see, download and delete data.

Tuya's certifications

• ISO/IEC 42001:2023 for AI management, issued by DNV
• ISO 27001, ISO 27017 and ISO 27701
• SOC 2 Type II and CSA STAR
• Assessments of GDPR, CCPA/CPRA, PIPEDA and DPDPA

Tuya states that the AI toy is designed with reference to, among others, the EU AI Act, the Data Act, GDPR and the Radio Equipment Directive (RED).

Puko

The plush is CE marked for the EU. Questions can be sent to info@puko.dk.