Security & Privacy

Should we allow employees to use consumer GenAI tools with company data?

Generally no for anything above Public classification. Consumer accounts do not carry the contractual data-use terms (no-training clauses, breach notification windows) that enterprise contracts do. Provide enterprise-tier alternatives (Claude for Enterprise, ChatGPT Enterprise, Copilot Enterprise) and enforce via policy + technical controls.

Last reviewed:

More on Security & Privacy

Browse the full FAQ for 170 answers, or start a free GenAI maturity assessment to see where your organisation stands.