Notes

Questions that keep coming up around AI and Microsoft 365, with answers you can check for yourself.

What can go into Claude or ChatGPT?

Your people use AI, often on private accounts. How a one-page policy, company accounts and an entry in your record of processing activities bring order.

Azure OpenAI: where your data is really processed

A Swiss region does not automatically mean processing in Switzerland. Which deployment types exist and how to check what you have set up.

Before Copilot starts: find overshared content

Copilot finds everything a person can access. Which tools Microsoft provides, which licence you need and in which order to proceed.

Template: AI policy for your company

Two A4 pages with blanks for your company name and the person in charge: approved tools, what may go in and what never, checking results, reporting incidents. It is not legal advice and has to be adapted to your company.

Download the template (Word)View (PDF)