Skip to content

Free tool

How exposed is your firm's use of AI?

Eleven quick questions about how your team uses AI tools. You'll get a risk rating and a prioritised list of what to do, tailored to your kind of business. It takes about three minutes, and your answers never leave your browser.

What kind of business are you?
How many people work there?
How often does your team use AI tools for work?

ChatGPT, Microsoft Copilot, Claude, Gemini, Perplexity or similar.

Which accounts do they use?
Does client personal data ever go into AI tools?

Names, contact details, financial, health or ID information about clients, staff or tenants.

Do you have an AI policy that staff have acknowledged?
Have you completed a DPIA for your use of AI?

A data protection impact assessment: a written look at the risks and how you reduce them.

Do your records of processing and privacy notice mention AI providers?
Have staff been trained on using AI with personal data?
Could you show an insurer or client how your firm uses AI, with evidence?
Do you keep a breach register, including near misses?

What the rating means

The score is a rough guide to how exposed your firm is, based on the duties UK GDPR places on any business that uses AI with personal data. It isn't a legal assessment.

  • Well placed · up to 20%

    You have most of the basics in place. Keep them up to date as your team's use of AI changes.

  • Some gaps to close · up to 50%

    You've made a start, but there are gaps a regulator, insurer or client would notice. The actions below are in priority order.

  • Exposed · up to 100%

    Client data is likely reaching AI tools without the protections UK GDPR expects. Start with the first few actions below this week.

Questions

About the AI risk check.

Do you see my answers?

No. The check runs entirely in your browser. Your answers aren't sent to us or stored anywhere, and they're gone when you close the page.

How is the score worked out?

Each answer carries points for how much it exposes your firm, for example using personal AI accounts or having no DPIA. The score is your total as a share of the maximum. It's a rough guide to where you stand, not a legal assessment.

Who is it for?

Owners, partners and practice managers of UK firms whose staff use AI tools, especially accountants, solicitors and estate agents, who handle a lot of client personal data.

What should I do with the results?

Work through the actions in order. The first few usually make the biggest difference: getting client work onto business plans and keeping personal data out of prompts.

Close the gaps in an afternoon

Saiela keeps client data out of AI tools, shows how your firm uses them and drafts the DPIA, policy and records for you. Try every Team feature free.