Ask the AI Advisor

Is it safe to put client data into AI tools?

Is it safe to put client data into AI tools? Usually yes, if you pick the right tier and follow a few plain house rules that keep GDPR onside. The honest answer, for most businesses I meet around Cork, is that the tool itself is rarely the problem. The habits around it are. A lot of the worry I hear from owners is vague. “I don’t want to get in bother, so we just told the team not to touch it.” That is understandable. It usually means the team is using AI anyway, quietly, on their own phones, with no rules at all. Which is the worst of both worlds.

Let’s make it concrete. What follows is general information, not legal advice, but it should be enough to help you make a sensible call this week.

What’s the real risk of putting client data into AI?

There are two things to keep straight, and people tend to blur them into one big cloud of dread. The first is training. Some free, consumer versions of AI tools can use what you type to help improve the model. That does not mean a stranger is reading your emails over their cornflakes. It does mean your input can leave your control in a way you can’t really audit later. The second is confidentiality and personal data. A customer’s name and address, a phone number, a health note, a PPS number, a signed supplier contract: none of that is yours to hand around casually, whatever the tool promises.

Put those two together and the real risk is easy to state. It’s pasting personal or confidential information into a free tool that might learn from it, when nobody in the business ever decided that was okay. Fix that one sentence and you’ve dealt with most of it.

Free consumer tiers vs business tiers: the setting that matters

Here is the part most people miss. The same brand often sells two quite different products under one name.

  • The free consumer tier is the one you sign up for with a personal email in thirty seconds. Handy for a quick draft or a summary. On some of these, your inputs can be used to train the model unless you dig into settings and turn that off.
  • The paid business or enterprise tier is a different animal. As standard, these say your data is not used to train their models, they offer proper admin controls, and many will sign a data processing agreement with you. That agreement matters under GDPR, because it puts the terms in writing.

The move isn’t “ban AI” or “allow everything”. It’s to decide which tier your business actually uses for real work, check the data setting once, and write it down. If you want help weighing up the main options, I compared the two most common ones in ChatGPT vs Claude for business.

A short do and don’t list

You don’t need a policy document the size of a phone book. You need a few lines everyone can remember. Start here.

Do:

  • Use a paid business tier for anything work-related, and turn training off where the option exists.
  • Strip out names and identifiers before pasting, if you only need the tool to fix wording or structure. “Draft a firm-but-polite reminder to a customer who is 30 days late” works fine without the real name.
  • Keep a short, plain note of which tools are approved and for what.

Don’t:

  • Paste passwords, bank details, PPS numbers, or health information into a general chatbot.
  • Upload a whole client folder or database “just to ask a quick question”.
  • Let the tool send anything to a real person without someone reading it first.

That last one is worth its own heading.

Keep a human on anything that affects a person

Say you run a small clinic and you use AI to draft appointment reminders and follow-ups. Grand. But the moment a decision touches a real person, a refund, a complaint, a bill, a “we can’t treat you”, a human reads it and presses send. Not because the draft is bad, but because a person needs to own the outcome. AI is very good at the first 80% of the wording. The last 20%, the judgement, is yours. Keep it that way and you avoid the horror stories entirely.

This is also just good practice under GDPR, which is wary of purely automated decisions that have a real effect on someone. A human in the loop keeps you well clear of that line.

Where GDPR and the Data Protection Commission come in

GDPR is the EU data protection law that applies here in Ireland, and the Data Protection Commission is the Irish regulator that oversees it. In plain terms, it expects you to have a lawful reason for using someone’s personal data, to use only what you need, to keep it secure, and to be able to say where it goes. Using an AI tool doesn’t change any of that. It just adds one more place your data can travel to, so you want to know it’s a place you chose on purpose.

There is also the EU AI Act coming into force in stages, which mostly targets higher-risk uses. For an ordinary small business drafting emails and summarising notes, it is not something to lose sleep over yet, but it is worth knowing the rules are moving. Again, general information, not legal advice. If you handle sensitive data at scale, talk to a solicitor and check the Commission’s own guidance.

How a proper setup handles all this

When I build something for a business, safety isn’t a lecture bolted on afterwards. It’s baked into how the thing is put together. That means the tools run on business tiers with training switched off, personal data is minimised or kept out of the prompt entirely, and anything customer-facing has a clear point where a person signs off. The team gets three or four rules they can actually recall, not a binder nobody opens.

Done right, you get the time back without the queasy feeling. The dull admin shrinks, the client data stays where it should, and you can answer the question “where does our information go?” without a shrug. If you’re not sure whether your current habits are safe, that is exactly the kind of thing a 45-minute AI Tools Assessment sorts out: what you can safely automate, on which tier, with what guardrails.

If you’d rather stop guessing and get a plain-English plan for using AI without tripping over client data, that is the work I do. You can book the €500 AI Tools Assessment and I’ll look at how your week actually runs, and where AI fits safely into it.

Book the €500 AI Tools Assessment

The assessment is credited in full if you go on to a build, and if I can’t find you five hours a week you pay nothing. See how it works.