AI vendor privacy checker: find out what an AI tool does with your business data

A colleague wants to use a new AI tool for customer emails, and its privacy terms run to dozens of pages of legal English. The AI vendor privacy checker skill reads the terms you paste and answers eight fixed questions for a Swiss business, with a quote for every answer and a ready question for the vendor wherever the terms are silent.

What it does

• Reads the data processing agreement (DPA), privacy policy, or trust or security page you paste. It notes the document names and dates, and tells you if the text looks cut off.
• Answers eight questions, always in this order:
  1. Where is the data stored and processed?
  2. Is our data used to train AI models?
  3. Who else gets the data (subprocessors)?
  4. How long is it kept, and can we delete it?
  5. What’s the basis for sending data out of Switzerland?
  6. Is there a data processing agreement for our plan?
  7. What security is in place, and how fast does the vendor report a breach?
  8. Who at our company can see the data, for example can admins read staff chats?
• Gives each answer a short plain summary, a short quote with the document and section, and a rating: OK, Unclear, Concern or Not stated.
• Keeps facts and gaps apart, and writes a question for the vendor for every “Not stated” or “Unclear” item, ready to paste into an email.
• Ends with a three-line summary: what looks fine, what to clarify, and which colour of data (green, amber or red) the terms seem to support. You decide.
• Says which plan each answer applies to, because terms often differ between free and business plans.
• Checks for Swiss points: whether the DPA mentions Switzerland or the Swiss Data Protection Act (nDSG), and on what basis data leaves Switzerland.
• Reports only what the pasted documents contain. It never fills gaps from memory and never calls a tool “compliant”, “legal” or “safe”.

It doesn’t decide whether a tool is legal to use, and it never accepts, signs or sends anything. Every reply ends with “This is general information, not legal advice.”

When to use it

• A team member asks to use a new AI tool for customer or staff data.
• You’re choosing between a free and a business plan and want to compare what each does with your data.
• You’re checking the AI tools your business already uses, as in step 3 of the guide.
• Software you already use adds an AI feature, and you want to know where the data goes.
• A vendor sends you a DPA to sign and you want the key points first.

To check a single document before it goes into AI, use the data traffic-light checker.