Blog · Published · Updated
Personal ChatGPT or Claude at work: who controls company data?
Short answer
Do not put customer data, employee data or confidential documents into a personal AI account until the company approves how it is used. An employee's paid subscription gives the company no contract, no access control and no way to take the account back. Moving 10 people to a business plan with rules and training costs from €1,150 net at Syntalith and pays back in 0.9 months.
- net for implementation for a team of up to 10 people, paid once
- from €1,150
- from start to work of the entire team
- 2 weeks
- after this time, we measure the effect on the same tasks
- 30 days
- conversation with an engineer and a written plan within 2 business days
- €0
We belong to the OpenAI and Anthropic partner programmes and learn through their official courses. What this means ↓
Author: Syntalith · 3 min read
Statistics
Personal AI accounts in companies: statistics 2026
78%
of AI users bring their own AI tools to work, according to Microsoft and LinkedIn's Work Trend Index (2024).
48.8%
According to Eurostat (2025), 48.8% of EU companies that considered AI and did not use it named concerns about data protection and privacy.
52.5%
According to Eurostat (2025), 52.5% of EU companies that considered AI and did not use it named a lack of clarity about the legal consequences.
84%
According to the European Commission (2025), 84% of Europeans think AI at work needs careful management to protect privacy and ensure transparency.
Source: European Commission, Special Eurobarometer 554 (2025) ↗
Figures checked: 22 October 2026
Company data and personal data are different categories
An employee bought ChatGPT Plus or Claude Pro and pastes a whole complaint history into the chat, with the name, the address and the contract terms. The company did not choose this tool and does not know where a copy of the document ended up.
A wholesale price list with no information about people may be confidential, although GDPR does not cover it. A complaint with a customer's name contains personal data, and a named work email address can also identify a person (the scope of GDPR according to the European Commission). You check trade secrets and obligations to the customer even when the file holds no personal data.
78%
bring their own AI
AI users who bring their own AI tools to work, according to Microsoft and LinkedIn (2024).
48.8%
worry about data
EU companies that considered AI and did not use it, naming data protection and privacy concerns, according to Eurostat (2025).
52.5%
unclear legal consequences
EU companies that considered AI and did not use it, naming unclear legal consequences, according to Eurostat (2025).
Are Plus and Pro enough for customer documents
An individual subscription gives the features and limits of the offer. It does not replace the company's decision on processing data. CNIL recommends not entering personal data or confidential information into consumer generative AI services.
An idea for a public post, with no confidential information
approve the tool and the checking of results
a personal account is possible
A customer complaint on a personal account
stop sharing the data
an approved process
Analysing documents in a company workspace
contract, permissions, retention
a company account
Connecting a whole drive or mailbox
assess the reach of the connection
a company account and the owner's consent
How to change the complaint flow
The employee needs a draft reply that follows the returns policy. The model usually does not need the name, the phone number or the full order history.
- 01DescriptionThe employee describes the problem without needless personal data.
- 02SourceThey attach the approved part of the terms and conditions.
- 03DraftThe model prepares a reply that refers to the clause in the terms.
- 04CheckThe employee checks the facts and their authority to decide.
- 05SendingThe reply goes out from the company's system, and never from a personal account.
Removing the name does not guarantee anonymity, because the order number and the details of the event may still identify the customer. If the case needs personal data, the work happens in an approved environment.
What moving to company accounts costs
- Time saved
- 10 people × 1 h a week × 4.33 = 43.3 h
- Value of that time
- €1,511
- Licences
- $250 (€223)
- Left after licences
- €1,288 a month
Payback of a €1,150 rollout
0.9 months
The hours saved are the scenario's assumption, which we check by timing the tasks before the training and after 30 days. €34.90 an hour is the EU average hourly labour cost for 2025 according to Eurostat. ChatGPT Business or Claude Team Standard at $25 a seat with monthly billing, at the ECB rate of 1.1205 USD per euro on 22 October 2026.
The company gets a clear answer on where people may work and which data they may share. The owner can remove access when an employee leaves, and customer service does not depend on one person's private account. After 30 days we time the same tasks again.
An AI Act and GDPR audit at Syntalith costs from €700 net and ends with a register of AI tools, a list of settings changes and a training plan for the team. The legal assessment of the use is approved by the responsible person on the client's side, with the DPO or a lawyer. The next steps are covered in the articles on preparing customer data and sorting out personal AI accounts.
„I already use AI.”
Your people too. Just no rules.
From our conversations with companies
5 na 10 employees paste sensitive data into private AI accounts: contracts, invoices, customer data.
In ESET survey (2026)
1 na 10 admits this in the survey.
Customer data pasted into a private AI account without an data processing agreement is a violation of the GDPR.
Don't worry, we won't tell anyone :)
What do we see in companies that "already use"
- Only ChatGPT or Claude accounts, without plugins, skills, integrations and MCP servers with company tools.
- Company programs are not connected to AI. People still click through systems and Excel, and enter chat data manually.
- Lack of company standards: everyone writes instructions in their own way, no one shares what works.
- No rules for personal data, GDPR and company secrets.
- No limits and no visibility: no one knows who uses AI, how much and for what.
62% Polish employees use AI at work · 27% companies have written rules for working with AI.
Source: ESET and DAGMA, Cyberportrait of Polish business 2026 (March 2026, 1,026 people) ↗
ChatGPT or Claude space review
Accounts, permissions, rules for working with data and 5 tasks set for the team. 1 day.
€450 net
Company accounts, rules of working with data and team training in 2 weeks, from €1,150 net.View implementation for the team →
„Is my data safe?”
Yes. You choose where they go: from your company account to the model on your server.
00Employee's private account
Customer and company data ends up in an account that the company cannot see or control. There is no data processing agreement, so it is a violation of the GDPR. When an employee leaves, the chat history goes with them.
01ChatGPT or Claude corporate account
The provider does not use your data to train models. A copy of the queries remains in his logs for up to 30 days.
02API with zero retention (ZDR)
The provider processes the request and does not save anything. It requires his consent, we prepare the application together.
03Processing in the EU
Queries are counted and stored in Europe: OpenAI in the EU region, Claude via clouds with the EU region.
04Model at your place
The open model runs on your server or in your cloud in the EU. The data does not go outside the company.
What we do with every implementation
- Confidentiality agreement and data processing agreement before we receive any data.
- You choose the cases for the prototype and we anonymize them upon request.
- The data stays in the EU and we delete it after the test.
- Corporate accounts with an administrator on your side.
When data cannot leave the company
The open model runs on your server or in your cloud in the EU. To choose from:
- White-tailed eagle
- Polish model, SpeakLeash and ACK Cyfronet AGH
- PLLUM
- Polish model, HIVE consortium commissioned by the Ministry of Digitization
- Qwen
- Alibaba
- GLM
- Zhipu AI
- DeepSeek
- DeepSeek
We select a model for the task and check it on your cases. We run it, tune it and maintain it.
Source: Bielik and PLLuM, ACK Cyfronet AGH ↗ · PLLuM, Ministry of Digitization ↗
Do you have a lot of your own data? We will fine-tune the small model.
- 1 Your examples
- 2 tuning
- 3 test on new cases
- 4 model at your place
When you have thousands of similar emails, documents or reports, we teach a small open model based on your examples. It works for you, responds quickly and costs less to maintain than a large model. We measure quality on issues that the model has not seen while learning.
Przemysław and Piotr did it in large programming and consulting companies. Artem did it before and does it today at Syntalith. It's about models on your own infrastructure, tuning and quality measurement.
You choose the protection level during the interview. We sign the data processing agreement before we see any data.Schedule a free analysis →
Price
Three packages. You know the price right away.
Team of up to 10 people
from €1,150
net, paid once · 2 weeks
Company, from 11 to 40 people
from €2,300
net, paid once · 3–4 weeks
Organization, over 40 people
from €4,600
net, paid once · 6–8 weeks
- The same packages once you have licenses. To start, an inspection of the space in 1 day is enough: €450 net.
- You buy Claude Team licenses directly from Anthropic, without our markup: USD 20 per person per month for annual payment or USD 25 for monthly payment, from 2 to 150 people.
From conversation to measurement
01 · 30 min
Free process review€0
An engineer picks 3 to 5 of your team's tasks with you. Written plan within 2 working days.
02 · 2 weeks
Rolloutfrom €1,150
Accounts and roles, rules for working with data, training on your team's tasks. You buy licences directly from the provider.
03 · after 30 days
Measurementincluded
We compare task times before and after. We name in writing the tasks worth handing to a system.
or call+48 888 78 48 78WhatsAppMon–Fri 9:00–17:00 CET
Questions
May an employee use a personal ChatGPT account at work?
For tasks without personal data or confidential information, if the company has approved it. Do not put customer or employee data into a personal account. The French authority CNIL recommends not entering such information into consumer generative AI services.
Are ChatGPT Plus or Claude Pro enough for customer documents?
An individual subscription gives features and limits. It does not replace the company's decision on processing data, contract terms, access control or the ability to take the account back when an employee leaves.
Do data from business accounts train the models?
OpenAI does not use data from business services and the API to train models by default. Anthropic describes separate rules for commercial services. The company approves its own process and the scope of data separately.
How much does it cost to sort out the accounts?
A ChatGPT or Claude rollout for a team of up to 10 people costs from €1,150 net at Syntalith, with rules for working with data and training. An AI Act and GDPR audit costs from €700 net and ends with a register of AI tools, a list of settings changes and a training plan for the team.
