Does your company use ChatGPT? 5 questions
A snapshot of real team use. Free. Not a certificate.
ChatGPT · Copilot · Gemini
ChatGPT at work: where to start
If the team already uses ChatGPT, Copilot or Gemini, the first step is to see real use. Five free questions. Not a certificate and not a legal classification.
Published guides
What is already written, in one place
These pages do not replace an Assessment or a legal opinion. They help you see use, the provider contract and when to request a review.
ChatGPT with client data
What can be at stake if emails or contracts are pasted into the tool.
AI SaaS contract clauses
Checklist before you sign ChatGPT Enterprise, Copilot or Gemini. DPA, logs, training.
AI legal risk assessment
What it includes, how it differs from a GDPR audit and when to request one.
AI literacy and Article 4
A duty to adopt measures, not an official certificate or a single EU course.
Company AI use policy
A recommended measure: tools, uses and data. Not a duty with that name.
AI Act for companies: 2026–2028 guide
Calendar, Digital Omnibus and first steps. No compliance score.
Contract and NDA review
If the provider document is already on the table: human review, remote.
FAQ
Common questions about ChatGPT at work
Can employees use ChatGPT with client data?
They may already be doing it. Pasting client data into ChatGPT, Copilot or Gemini can involve personal data processing. There is no automatic answer for every company. The first step is to see real use: five questions from Legal Stones. Not a certificate.
Are the 5 questions a certificate or a legal classification?
No. They are an initial use screening. They are not a legal opinion, a certificate, or a legal classification under the AI Act.
Should the company ban ChatGPT?
Not necessarily. A total ban sometimes pushes use onto personal accounts. The usual path is to define for what, with which information and with which tool.