As a general principle, responsibility remains with the company. Clear governance frameworks, robust review processes, and appropriate human oversight are therefore essential.