Why underwriters ask about it
business data flowing through personal accounts is invisible to you and to your insurer — and it's how customer data leaks without anyone noticing.
How to fix it
- Ask staff — without blame — which AI tools they actually use for work. Add them to the inventory.
- Pick the approved list and create business accounts for those tools.
- Tell staff plainly: work data only in business accounts, and never the categories in R5.1.
- Have each person sign the one-page policy (R10.1) so the rule is on record.
Evidence to keep
the approved-tools list and signed acknowledgments.