Our Aspiration
Walmart seeks to build and maintain the trust of customers, associates, suppliers, communities, and other stakeholders through the responsible use of data, AI, and technology, in line with our values of respecting the individual, integrity, service, and excellence.
Relevance to Our Business and Society
As an omnichannel retailer, Walmart’s business increasingly depends on data, AI, and technology to deliver excellent customer service and enable our associates’ work. We build trust with our customers, associates, and other stakeholders by using data, AI, and technology responsibly and in a manner consistent with our values.
Governance
Empowering appropriate oversight of our data, AI, and technology through accountable management that supports responsible use and risk management.
- Walmart’s Board has delegated oversight of information systems, information security, data privacy, AI, and cybersecurity to its Audit Committee, supported by cross-functional management teams and the Chief Information Security Officer.
- Dedicated teams oversee cybersecurity, responsible AI, data governance, privacy, and emerging technologies while assessing and managing cybersecurity risks across the enterprise.
- Walmart provides relevant trainings to associates and certain third parties. In FY2026, 1.4 million associates completed training covering cybersecurity, appropriate technology use, and proper data handling.
Promoting Digital Trust
Shaping decisions regarding data, AI, and other emerging technologies to align with our Digital Trust Principles, supported by governance and risk assessment processes.
- Walmart’s Digital Trust Principles, based on our core values of Respect, Integrity, Service, and Excellence, guide how data, AI, and emerging technologies are developed and used through enterprise policies, standards, governance, communication, and training.
- Our practices include maintaining a list of approved internal AI tools, performing compliance reviews, evaluating higher-impact AI systems for potential risks to individuals, and monitoring evolving legal and regulatory requirements.
- Walmart provides associates with trainings regarding digital trust and equips them with AI-enabled tools—including My Assistant, developer tools, and AI-generated task lists —to simplify work and improve productivity.
- Customer-facing AI capabilities, including Sparky, supporting product discovery, while AI also helps improve inventory tracking and delivery experiences.
Protecting Privacy and Data
Safeguarding the use of personal information to protect confidentiality and maintain trust.
- Walmart’s Global Privacy by Design Policy requires associates to build privacy controls throughout the lifecycle of technology solutions and business processes. Enterprise data governance capabilities—including data classification, data inventories, privacy risk assessments, governance frameworks, and cross-border data transfer controls—support responsible data use and protection of personal information.
- Privacy notices explain how personal information is collected, used, protected, and shared across Walmart's businesses and markets. Global incident response programs help detect, respond to, and remediate actual or suspected data incidents through defined procedures, regulatory reporting, training, testing, and continuous improvement.
Cybersecurity
Protecting information entrusted to us and safeguarding our data and digital infrastructure.
- Walmart operates cybersecurity functions 24/7 to protect business operations, information, and digital infrastructure through enterprise governance, risk management, incident response, security policies, and associate training.
- Learning modules, phishing simulations, awareness campaigns, and Cybersecurity Rockstar campaigns reinforce secure behaviors and a shared-responsibility culture across the organization.
- Walmart helps customers stay safe online through cybersecurity education and fraud awareness resources, while contributing to the broader cybersecurity community through open-source collaboration, information-sharing partnerships, and its annual SparkCon conference.
Walmart’s Digital Trust Principles
Our Digital Trust Principles articulate our intentions for using data and technology, including artificial intelligence and automation, in service of this mission. These Principles guide our policies, standards, practices, governance, and communication and training as we work to use data and technology responsibly with our customers, associates, suppliers, sellers, and partners.
Respect: We seek to use data and technology in ways that respect the dignity, rights, and interests of the people we serve.
- Evaluating potential unintended outcomes and working to mitigate risks
- Building safeguards into the systems we develop and deploy
- Applying human judgment and oversight where it matters most.
Integrity: We seek to use data and technology in ways that are accountable and transparent, helping earn and maintain trust through clear policies, responsible practices, and appropriate oversight.
- Providing meaningful information about how systems are used, the data they rely on, and their limitations
- Avoiding the design or use of technology in ways that are deceptive, manipulative, or inconsistent with the interests of the people we serve
- Keeping accountability with people, with technology supporting human work, judgment, and decision-making.
Service: We seek to focus data and technology on serving people by enhancing experiences, delivering value, and making everyday life easier for our customers, members, and associates.
- Designing systems with the needs of customers, members, and associates in mind
- Using data and technology to support better experiences, stronger operations, and more effective service
- Considering how technology can help us deliver on our purpose and create shared value.
Excellence: We seek to develop and use technology that is high-quality, secure, reliable, and continuously improving, enabling responsible innovation across our business.
- Assessing and testing systems before deployment and monitoring performance over time
- Applying oversight proportionate to the risks and intended uses of the technology
- Maintaining security, privacy, and governance practices that evolve alongside the technologies they support.