Privacy & policy
Where the line sits, how to write it down, and what to do about the staff member who has been pasting client documents into a free account for six months.
Automated decisions and your privacy policy: what changes on 10 December 2026
It's a disclosure rule, not a ban. But it asks a question most small businesses can't yet answer: where in the business is software deciding things about people?
5 minute readPrivacy & policyAI note-takers in client meetings: what to settle before you switch one on
The note-taker is the AI feature most businesses switch on without deciding to — and it's the one that sits in the room with your clients.
4 minute readPrivacy & policyA one-page AI policy your team will actually follow
Long policies fail in a specific way: people read the first line, infer the rest, and get the inference wrong.
3 minute readPrivacy & policyFree tier, paid tier: why the same AI tool gives two different answers about your data
Most arguments about which AI tool is safer are really arguments about which account someone signed up for.
4 minute readPrivacy & policyYour team is already using AI. Here's how to find out without starting a witch hunt
The question isn't whether anyone is using it. It's whether you'll ever find out, and that depends entirely on how you ask.
4 minute readWhere to start if nothing is written down
Read the never list first and hand it to your team this week — it is the shortest path from exposed to bounded. Then establish which accounts are actually in use, because the account type matters more than the brand. Only then write the rule, since a policy built on a guess is one you can't enforce.
The free versions of all three are in the guides, and the engagement that does it for you is policy and audit.
Got a specific privacy question?
The written rule comes before any training in regulated work. If that's you, a short enquiry is the quickest way to find out what order things need to happen in.