Trust Stack · Layer 02

Security

Stop confidential data leaving the building

What this layer means

Security is about preventing your confidential business data from leaving the building through AI tools. It means using business-grade versions of AI tools where available, having written rules about what staff can and can't paste into public tools, and having a process for spotting potential data leaks before they become incidents.

For Irish SMEs, security starts with a few practical steps: switching from personal ChatGPT accounts to Team or Enterprise plans where data isn't used for training, having a simple acceptable use policy, and knowing what to do if something goes wrong.

A padlock with its shackle lifted out and swung open, showing how easily confidential data can leave when nothing is checked.

Why SMEs should care

  • Business-grade AI plans aren't significantly more expensive than personal plans
  • A single data leak can damage client trust and trigger GDPR reporting requirements
  • Most SMEs have no written rules about what staff can paste into AI tools
  • Shadow AI (tools used without IT knowing) is already happening in your business

Common failure patterns

  • Staff using personal AI accounts with training data sharing enabled
  • No written policy on what is safe to paste into AI tools
  • No process for responding to a data incident involving AI
  • Client data processed through tools with no data processing agreement

Questions leaders should ask

  • Are we using business-grade or personal AI tool accounts?
  • Do we have a written acceptable use policy for AI tools?
  • What would we do if a staff member accidentally shared client data with an AI tool?
  • Have we reviewed the data processing terms of every AI tool in use?

Start here

A practical first action

Switch every AI tool your team uses from personal to business-grade accounts. On ChatGPT, this means Team or Enterprise. On Claude, this means Pro with data retention opt-out. This single change means your data isn't used to train models, and you get a data processing agreement.

How does your business score on Security?

The AI Readiness Scorecard measures your position across all five Trust Stack layers in about ten minutes.

Take the assessment

Start with a thirty-minute conversation

Book a free consultation. We map your specific challenges and identify practical next steps. No sales pressure, just useful advice.