Often the risk is not an attack: it is a well-meaning person who, to save time, puts customer or supplier data into a free or personal AI. Three everyday situations.
Practical exampleA free AI, with a customer’s contract
“To save time, I paste the customer’s contract into a free AI.”
What can go wrong
Customer data leaves your control. Depending on the service and its settings, it may be stored or used to improve the service. If it includes personal data, you may also owe your customer an explanation.
What we do
We choose with you tools and settings that fit your work, and write a one-page rule on what can and cannot be pasted.
Practical exampleSupplier price lists in a personal chat
“I upload our suppliers’ price lists and terms to get a comparison.”
What can go wrong
Prices, margins and terms are confidential business information. Once they are in a personal account, nobody in the company knows where they ended up.
What we do
We separate what can be shared from what stays inside, and set up the comparison on data you decide to provide.
Practical exampleA personal account used for work
“My employee uses their own AI account for work, and then leaves.”
What can go wrong
Conversations and files stay in a personal account: you cannot see them, retrieve them or delete them.
What we do
We help you move to company accounts, so that work stays with the company, and add a short checklist for when someone joins or leaves.
This is practical guidance, not legal advice: for personal data and professional secrecy we point you to a qualified professional.