Situation — AI and sovereignty

My teams use ChatGPT or Copilot with client data, and I don't know what is leaving the company.

Context

A salesperson summarises a contract. An office assistant rewords a client email. An HR manager sorts CVs. Everything goes through ChatGPT, Copilot or another assistant, often on a personal account.

Nobody has banned it. Nobody has set rules either.

The problem

  • Data pasted into a public chatbot leaves the company. You no longer know where it goes.
  • Afterwards, it is often impossible to measure what got out.
  • Banning everything deprives your teams of real time savings.

Case study

Real-life caseDecember 2025

Municipality of Eindhoven, Netherlands

In 2025, the municipality of Eindhoven, in the Netherlands, reviewed a sample covering 30 days of use. Staff had entered large numbers of confidential documents into public AI chatbots: CVs, child protection files, internal reports.

The municipality could not measure the exact extent of the leak. It blocked public AI websites and asked the provider to delete the data.

The Dutch data protection authority received more reports of this kind in 2025 than in 2024. This case involves a public body; the mechanism is the same in a company.

Read the sourceDutch DPA raises the alarm over data leaks caused by AI — Accountant.nl (opens in a new tab)

Why us?

  • We map how your teams actually use AI.
  • We work with you to write a clear usage policy and the list of approved tools.
  • We train your teams, in a short format.
  • You keep the time AI saves you, with rules everyone understands.

Contact us

Talk to an expert

A free 30-minute video call with one of our experts, then your free quote, with no commitment.

Take the diagnostic

A few questions, the first already answered for your situation: your answers help us prepare the video call. Free, no sign-up, about 2 minutes.

Take the diagnostic