Blog
What can you do with an AI chatbot when your documents contain client data? Find an answer to each question here, with sources.
Where an uploaded file ends up, how long it stays, who can access it and what deletion means. With four approaches for files containing personal data.
Read the article →All articles
Every article starts with the short answer, cites its sources in the text and ends with the questions people most often ask.
The AI Act timeline after the digital omnibus: what applies already, what has moved to 2027 and 2028, and what AI chatbot users need to arrange now.
How retrieval-augmented generation works, how it differs from uploading and fine-tuning, why it reduces errors and which privacy questions to ask.
What the Model Context Protocol is, how a connection differs from uploading a file, what an assistant receives and which risks you should check.
How schools use AI, why pupil data receives extra protection, which applications are prohibited or high risk, and what a school needs to arrange.
Who decides on AI tools, who assesses the risks and who oversees them? The roles explained, with a simple meeting structure and an AI register.
What a deepfake is, which rules apply now, which prohibition is coming and how organisations tackle fraud using a fabricated voice or video.
What the Dutch Algorithm Register and IAMA are, what is mandatory and what is not, and what a municipality arranges when staff use AI chatbots.
What a language model does, what tokens and a context window are, why a model invents things and what it does and does not remember from your input.
What ChatGPT stores, who can access it, how to turn off training, and what temporary chats, memory and shared links do. Includes a practical checklist.
When you must conduct a DPIA for an AI chatbot or AI search feature, what it needs to contain and how to approach the assessment in seven steps.
What an AI detector measures, why its result is a probability rather than proof, and what to arrange before challenging a pupil or employee about it.
When an AI provider is your processor, what the agreement must contain and where each provider publishes it, with a checklist of questions to ask.
Three routes to an AI chatbot for your business: what you get, the management and maintenance involved, and the privacy questions to ask for each.
What an AI agent is, why autonomous actions matter more for privacy than chatting, the risks involved and what to arrange before it starts work.
Claude, Microsoft Copilot, Gemini and Mistral Vibe alongside ChatGPT Business: training, agreements, data location and administration. October 2026.
What the rules say about patient data in an AI chatbot, what supervisory authorities and medical organisations advise, and what to arrange per use.
For each ChatGPT, Claude and Mistral Vibe plan: what happens to your input, how long it stays and whether an agreement is available. October 2026.
NotebookLM is now Gemini Notebook. What happens to uploaded sources for each account type, how sharing works and what this means for client files.
Which European AI assistants and models exist, what European actually means and which part of your privacy questions a European provider solves.
What the European AI literacy rule asks of employers, what changed in summer 2026 and how to demonstrate the measures your organisation has taken.
Where your data ends up at DeepSeek, what the supervisory authority says, and why the app differs from the open model you can run yourself.
Who must keep a record of processing activities, which fields it needs and what an AI assistant entry looks like, with a worked fictional example.
Gemini has variants with different rules. For each: training on input, human review, retention periods, agreements and where your data is processed.
Which data the law treats as special, why processing is prohibited unless an exception applies, and what that means for client files in an AI chatbot.
Employees often use AI chatbots outside their organisation's visibility. What that means, what can go wrong and how to gain control step by step.
What the GDPR is, who it applies to, its principles, lawful bases, rights and duties, the fines involved and what using AI adds to those requirements.
The difference between pseudonymising, anonymising and masking, what the court said about it and what this means when text goes to an AI model.
What the AI Act is, its risk categories and roles, and what an organisation that only uses AI chatbots already needs to arrange today.
What personal data is, with examples from names to IP addresses, what falls outside the definition and what it means for a client file in an AI chatbot.
What a data breach is, the different types, when to notify the supervisory authority and the people concerned, and what to do in the first 72 hours.
We show it with fictitious client files from your sector: upload, detection, review, search and the connection with your AI assistant. Afterwards you'll know exactly what your team can use safely.
Book a demo →