Before uploading a contract to an AI tool

Executive summary

Review the document and the account together. Removing names may leave individuals identifiable through project details. A document without personal data can still contain confidential commercial terms.

Our recommendation is a short internal classification: permitted uploads, uploads requiring preparation, and prohibited uploads. Check retention, training use and deletion against the purchased service plan. A supplier’s general security webpage does not replace the terms of the actual subscription.

Sources

KVKK · Üretken Yapay Zekâ ve Kişisel Verilerin Korunması Rehberi

https://www.kvkk.gov.tr/SharedFolderServer/CMSFiles/MTY5MjNmNmIwZWY3YTE.pdf