Protect & adopt · AI services
Use AI without leaking customer data.
Your staff may already use AI tools at work. We find out which ones, check what customer data they can reach, and write a plain AI use policy your team can follow, with the Privacy Act in mind.
Every engagement starts with a free call. Quoted once we know the job.
A good fit if
- You hold customer or patient data
- Your staff use AI tools and there are no rules yet
- You're about to roll out a chatbot, assistant or automation
- Clients ask how you use AI and you'd like a proper answer
Not the right fit if
- You need legal advice: we suggest a lawyer for that
- You need a formal compliance audit for a regulator
- You have a security incident right now: call your IT provider first
What you get
An AI use policy
A short, plain policy: which tools staff may use, for what, and what must never go into them. Written for your team to read, not to file away.
A check of which tools see what
A list of the AI tools and features in use, including ones built into software you already pay for, and what customer data each one can reach.
Settings changed where it matters
Where a tool lets you limit what it keeps or learns from, we help you switch that on. Where it doesn't, we suggest an alternative or dropping it.
Set up with the Privacy Act in mind
The policy and settings are built around the Australian Privacy Principles, including what your privacy policy may need to say about automated decisions.
How it runs
- 1
A 10-minute call
What data you hold, which tools you think are in use, and what's worrying you.
- 2
A written plan and quote
What we'll check, who we'll talk to, and the price, before any work starts.
- 3
Check and write
We find what is in use, check what each tool can reach and keep, and draft the policy with you.
- 4
Brief and apply
We brief your team with real examples, help apply the settings, and leave you a list of what to recheck.
Where customer data leaks into AI
The everyday risks aren't hacks. They're a staff member pasting a customer email into a free AI chat tool to tidy the wording, or an AI feature switched on in software nobody checked. Without a policy, nobody knows what's allowed.
The fix is mostly simple: know what's in use, decide what's allowed, and set the tools up properly. These are the usual places to look:
- Customer details pasted into free AI chat tools
- AI note-takers recording meetings and calls
- AI features switched on by default in everyday software
- Browser extensions that can read what is on screen
- Personal accounts used for work
The Privacy Act and AI
The Privacy Act 1988 and the Australian Privacy Principles set rules for how covered businesses collect, use and disclose personal information. That includes putting it into AI tools, or having an AI tool collect it for you.
From 10 December 2026, the 2024 amendments add a transparency duty. If a computer program uses personal information to make decisions that could significantly affect people's rights or interests, or to do things substantially and directly related to those decisions, your privacy policy must say so.
We're not lawyers, and this isn't legal advice. We help you write and apply a practical policy. For what the law requires of your business, we recommend a legal review.
What it doesn't cover
It isn't a cyber security audit, a formal compliance assessment or legal advice. It's a practical check and a policy your team can follow, built to sit alongside your IT provider's security work and your lawyer's advice.
It also isn't a one-off. AI tools change their features and terms often, so the policy comes with a short list of things to recheck each year, or whenever you add a tool.
Questions
It's quoted after the first call. The price depends on how many people and tools are involved and what kinds of data you hold. You get it in writing before work starts.
It depends on your business. Generally it covers businesses with annual turnover over $3 million, plus some smaller ones, such as health service providers. We'll flag what looks relevant, but whether it applies to you is a question for a lawyer.
Bans tend to push AI use out of sight, onto personal phones and accounts. A clear policy that names approved tools, and what never goes into them, is usually easier to follow and easier to check.
It's good practice, and it builds trust. Our own J-Voice Agent tells every caller up front that they're speaking with an AI assistant. Whether the law requires it in your situation is a question for legal review.
No. We don't audit you for a regulator or issue a badge. It's a practical check, a written policy and settings applied, which you can point to when a client asks how you use AI.
At least once a year, and whenever you add an AI tool or the rules change. The automated-decision changes from 10 December 2026 are a good reason to look now.
Tell us what
eats your week
We'll show you what AI can take off it, starting with your phones.
No credit card required · Free tier available