Example situation: Employees Use Public AI Tools With Customer Data

Question
“We noticed that some employees use public AI tools to summarize customer contracts and emails. A ban would slow down work, and permission could expose confidential data. What should we do?”
What to question
Which customer data do employees actually enter into public tools? What do customer contracts say about processing data by third parties? Do employees have an approved alternative?
How the depth changes
Focused → broader → deepest

Four perspectives quickly separate the real risk from panic: which customer data is actually being entered and what contracts and regulations say…

Four additional perspectives question the assumption that a ban is the only safe response, model a scenario in which a customer's data appears where…

Four additional perspectives test business tools with contractual data protection, clear rules by type of data (allowed, allowed with anonymization,…
Have a decision like this?
Describe the situation in a few sentences. We suggest the appropriate analysis level.
Compare Essential / Consilium / Grand Consilium