Most people never ask. They sign up, connect the tool to their customer database or upload a spreadsheet, and start using it. The questions come later, usually after something goes wrong.

I ask six questions before any AI tool gets near a customer list. Most of the answers are in the tool’s privacy policy, data terms or trust page. If you can’t find one, email them and ask. How they answer tells you a lot too.

1. Does it train on my data?

The answer you want is no, by default. You shouldn’t have to go hunting for a setting. Plenty of tools use your chats and files to improve their product unless you switch it off, and free plans are the most likely to.

2. How long does it keep my chats and files?

Days, months, forever? It should say. And you should be able to delete things yourself, without emailing support.

3. Can its staff read my conversations?

Some tools have people review chats that get flagged, for safety or quality. That isn’t always a dealbreaker. You just want to know before you paste in something about a client.

4. Who else gets my data?

Lots of AI tools run on someone else’s AI underneath. A writing tool might send your text to one of the big AI companies to do the actual work. Ask which one, and whether the same rules on training and storage apply there.

5. How fast will it tell me about a breach?

You want a number of hours. “Promptly” isn’t a number. If customer details leak, you may have your own obligations to tell people, so their timeline becomes your timeline.

6. When I leave, does it all get deleted?

Backups included. And can you export everything first? A tool that’s easy to join and hard to leave keeps your data long after you’ve stopped paying.

Check the plan you’re actually on

This is the one that catches people. The good answers are often on paid or business plans, and the free version comes with different rules. A tool can honestly say “we don’t train on customer data” and mean its business customers, not you on the free plan.

So read the terms for your plan, not the marketing page. If the answers you want only come with the paid plan, that’s usually worth paying for before any customer details go in.

Make it a habit

Keep the six questions in a note. Every time someone on the team wants to try a new AI tool, they answer the six first and add it to your list of approved tools. It takes fifteen minutes, and you always know where your customer data is.

While you’re at it, ask whether the job needs real customer details at all. A lot of the time you can swap names for “Client A” and the AI does the job just as well.

If you’d like help setting up AI tools you can trust with customer data, set up your own AI Operating System is a good place to start. If your team has built its own app that holds customer data, the App Foundation makes it safe to run.