Think Build Implement Repeat
London, UK +44 7367 067226
WhatsApp FOLLOW f in X
  1. Home
  2. Blog
  3. How Do I Stop My Staff Pasting Client Data Into ChatGPT Without Banning AI?
Problems We Solve

How Do I Stop My Staff Pasting Client Data Into ChatGPT Without Banning AI?

Staff paste client data into personal ChatGPT accounts because it helps. We build an approved AI workspace so the useful habit stays and the leak stops.

Updated 4 min readBy SpiderHunts Technologies

Free estimateNo obligation

Get a free estimate

Tell us what you need. A senior engineer reads every enquiry.

Takes under a minute. We never share your details.

  • Free consultation
  • No commitment
  • NDA on request

Prefer to talk? Book a free 30-minute call →

Quick answer — TL;DR

Banning ChatGPT rarely stops staff using it; it just moves the habit to phones and personal accounts. The fix is to give people an approved AI workspace that is as easy as the one they already use, running on business terms, with sign-in through your company accounts, redaction of the obvious personal data, and a log you can actually check.

You have seen it on someone's screen

It usually comes out by accident. Someone in accounts shares their screen on a call and there is a ChatGPT tab open with a customer's aged debt list pasted into it. A project manager mentions that they "ran the contract through ChatGPT" to find the break clause. A new starter asks which AI account the company uses, and the honest answer is: everyone's own.

None of these people are being careless on purpose. They found a tool that saves them half an afternoon, nobody told them what was allowed, and the free or personal version was one browser tab away. The problem is that client names, salaries, contract terms and health details are now sitting in accounts the business does not control, cannot audit and cannot close when someone leaves.

Why a policy on its own does not fix it

Most businesses respond by writing an AI policy, and a policy is worth having. But a policy that says "do not paste confidential data into public AI tools" without offering an alternative asks staff to go back to the slow way. People comply for a fortnight and then quietly drift back, often onto their phones where you have even less visibility.

The real cause is that the approved route either does not exist or is worse than the unapproved one. If the sanctioned tool needs a ticket to access, has no memory of the last conversation, or cannot read a PDF, the personal account wins every time. You are competing on convenience, and the fix has to win on convenience too.

What the current habit is exposing

Where the data goesWhat that means for you
Personal consumer accountsTerms you have not agreed to, and settings each person chose themselves
Accounts tied to personal emailAccess continues after the person leaves the business
No central logYou cannot answer a client who asks what was shared, or when
Mixed personal and work chatsWork material sits alongside holiday plans in one history
Copies of attachmentsFiles uploaded for a quick summary stay in someone else's system

There is also a quieter cost. Because nobody talks about it openly, the people who have worked out genuinely useful ways of using AI keep them to themselves. The good prompts, the clever uses, the time saved: none of it spreads across the team.

How we set up an approved AI workspace

What we build is a company AI workspace that staff actually prefer to their personal accounts. The pieces are:

  1. A chat interface on your own domain, signed in through Microsoft 365 or Google Workspace, so access starts and ends with the employee's work account.
  2. Model access through business agreements, using the OpenAI API, Azure OpenAI or Anthropic Claude, where the published terms say your inputs are not used to train models by default. We check the current terms with you rather than assuming.
  3. A redaction step that spots common personal data (National Insurance numbers, bank details, card numbers, dates of birth, email addresses) and masks it before the text leaves your environment, with a clear message to the user when it does.
  4. Document upload that works properly, so the reason people used a personal account ("I needed it to read the PDF") goes away.
  5. Shared prompt templates for the jobs your team already does, such as summarising a tender, drafting a chaser email or turning meeting notes into actions.
  6. A usage log that records who used which template and when, stored in your tenancy, so you can answer questions from clients and auditors.

Where there is data that should never go to an external model at all, we mark those sources as out of bounds or route them to a model hosted inside your own cloud account. We also write a one-page policy that points to the new workspace, so the rule and the alternative arrive together.

What changes for the team

Staff keep the thing they liked about ChatGPT: a quick way to draft, summarise and think out loud. What changes is where it happens. The work sits under a company login, the obvious personal data is masked before it goes anywhere, and when someone leaves, their access goes with their account.

Managers get something they did not have before: a view of what AI is actually being used for. That tells you which tasks are worth building into proper tools next, and it makes the policy conversation factual rather than a guess about who might be doing what.

Is this your situation?

  • You know, or strongly suspect, that staff use personal AI accounts for work.
  • You have client contracts or NDAs with confidentiality clauses that nobody has checked against AI use.
  • Your AI policy exists but nobody can tell you whether it is followed.
  • Staff have asked for an approved tool and been told "soon".
  • A leaver may still have work conversations in a personal AI account.

FAQ

Frequently asked questions

The questions readers ask us after this guide.

Still have a question?

Ask us directly — a senior engineer will get back to you.

Ask about your project

Can we not just block ChatGPT on the company network?

You can, and some businesses do, but staff will use their phones instead. Blocking without an alternative usually reduces visibility rather than risk.

Does the redaction catch everything?

No. It reliably catches structured items such as account numbers and dates of birth, and it misses context, such as a description that identifies a person without naming them. It is one layer alongside training and sensible defaults.

Will this work with Microsoft 365 Copilot if we already pay for it?

Yes. If Copilot covers some of the need, we build around it rather than duplicating it, and focus on the gaps such as templates for specific jobs or data that Copilot should not touch.

What drives the cost of setting this up?

Mainly the number of systems it connects to, how much document handling is needed, and whether any model has to be hosted inside your own cloud account. Model usage is a running cost on top.

What do you need from us to start?

A rough list of what staff use AI for now, your identity provider (Microsoft or Google), and any client contracts with confidentiality terms you are worried about.

Keep reading

More on Problems We Solve

Start here

Tell us where AI is going wrong for you

Describe what your team is doing with AI today, what is worrying you and which systems are involved. We will tell you what we would build, what we would leave alone, and if a smaller change would fix it, we will say so.

  1. You tell us what you needTwo minutes on the form, or a message on WhatsApp.
  2. A senior engineer reviews itAnd comes back with questions, a realistic range and an honest view on fit.
  3. Free 30-minute scoping callWe talk through scope, options and a realistic estimate — with no obligation.
Free estimateNo obligation

Talk to someone who builds this

Send a short brief and we will come back with an honest view and a realistic range.

Takes under a minute. We never share your details.

  • Free consultation
  • No commitment
  • NDA on request

Prefer to talk? Book a free 30-minute call →