Home › AI security & data protection
AI security & data protection
We make your AI use safe and compliant: the right business plans and privacy settings, a clear AI policy for staff, data protection impact assessments, vendor checks, and protection against risks like data leaks and prompt injection — for organisations covered by GDPR and CCPA.
Who this is for
- Businesses whose staff already use ChatGPT or other AI tools
- Organisations handling client, patient or financial data
- Managers who need to show regulators, clients or insurers that AI is used responsibly
What's included
- An audit of which AI tools your team uses today (including 'shadow AI')
- Switching to business plans with no training on your data, SSO and retention controls
- A plain-English AI acceptable-use policy and staff guidance
- Data protection impact assessment (DPIA) and records for AI tools
- Vendor and data-processing agreement checks
- Security for AI agents and automations: least privilege, approvals, logging, prompt-injection defences
- Private / local AI for the most sensitive work
How it works
- Book a free call or email us.
- A free call with an expert, a clear plan and one fixed price.
- We do the work with you, test it, and show you how to use it.
- We stay available for questions and further help.
Price
Every job is different, so there's no hourly meter. After a free call you get one fixed price for the result — before any work starts. AI subscriptions are paid directly by you, at cost.
Frequently asked questions
Is it legal to use ChatGPT with customer data?
It can be, if you use the right plan and settings, have a lawful basis, tell people in your privacy notice, and have a data processing agreement in place. Free consumer accounts are usually not appropriate for client data.
What should an AI policy include?
Which tools are approved, what data must never be entered, how to check AI output, who is accountable, and how to report problems. We write one that fits on two pages.
What is prompt injection?
A way of tricking an AI system with hidden instructions in emails, web pages or documents. It matters most when AI agents can take actions — we design agents with limited permissions and human approval to reduce the risk.
Are you lawyers?
No. We handle the practical and technical side and work alongside your legal adviser or DPO where formal legal advice is needed.
Related help
Free guides
Last updated 2026-11-14.