# How do we use AI chatbots securely as an organisation?

Treat an AI service like any other supplier that processes your data, and set it up deliberately. Choose one or two approved services and use business accounts, with single sign-on and multi-factor authentication, so that leavers lose access and admins can see usage. Check the contract: whether your data is used for training, how long it is kept, where it is processed, and whether a data-processing agreement under GDPR is in place. Write a one-page policy with examples of what may and may not go in, and who to ask. Turn on the provider's admin controls, such as retention limits and restrictions on plugins or connectors. Decide how outputs are reviewed before they reach customers or production code. Train people on the policy and on the AI Act's literacy duty. Then check reality: from the Pro plan NetSenX shows which AI services hosts actually use, including unapproved ones and local models, and how much data goes to each, without reading the content.

FAQ: [AI use and AI security](https://netsenx.com/en/faq/ai) · https://netsenx.com/en/faq/how-to-use-ai-chatbots-securely-as-a-company

## Read next

- https://netsenx.com/en/shadow-ai-detection
- https://netsenx.com/en/ai-transparency

## Related questions

- [How do we stop employees pasting company data into ChatGPT?](https://netsenx.com/en/faq/stop-employees-pasting-company-data-into-chatgpt)
- [Should we block ChatGPT on the company network?](https://netsenx.com/en/faq/should-we-block-chatgpt-on-the-company-network)
- [What should we do when staff use AI tools without understanding the risks?](https://netsenx.com/en/faq/what-to-do-when-staff-use-ai-without-understanding-the-risks)
- [How do we check whether staff follow our AI policy?](https://netsenx.com/en/faq/how-to-check-whether-staff-follow-our-ai-policy)
- [Is it safe to upload financial spreadsheets to an AI tool?](https://netsenx.com/en/faq/is-it-safe-to-upload-financial-spreadsheets-to-an-ai-tool)