AI security and governance
AI tools are only as safe as the rules and settings around them. We help you decide which tools are allowed, write a policy staff can follow, and put the controls in place so sensitive data stays protected.
When someone asks an AI tool a question at work, it can draw on whatever that person can open. If files are shared too widely, or sensitive data isn’t labelled, AI can surface it in an answer. Free tools add another risk: what staff paste in may be used to train the model.
Good governance isn’t about saying no. It’s about making the safe way the easy way: approved tools that work well, settings that protect your data, and a policy short enough that people read it.
What changes for you
- Staff know which AI tools they can use and what they can put into them.
- Sensitive information is labelled and protected, so it stays out of AI answers it shouldn’t be in.
- You can show your board, governors, trustees or auditors how AI is controlled.
What we put in place
AI acceptable use policy
A short, readable policy: which tools are approved, what can go into them and who to ask.
Approved tools
A shortlist of AI tools that meet your data protection needs, with unapproved ones blocked where you choose.
Data protection impact assessment
A DPIA for your AI use, so you can show how personal data is handled under UK GDPR.
Identity and access
Multi-factor authentication and conditional access checked, because AI uses the same sign-in as everything else.
Data loss prevention
Rules that stop sensitive information, such as card numbers or pupil records, being shared with AI tools.
Governance routine
Who owns AI decisions, how new tools are approved and when the policy is reviewed.
Common questions
Should we just block AI tools?
Do you handle wider cyber security too?
Start with a readiness assessment.
We look at how you work, what your data looks like and where AI would save the most time. You get a scored report and a plan in plain English, whatever you decide next.