How I work · Security
AI with judgement: useful, safe and under your control.
AI is powerful, but it isn't infallible. So I design every flow thinking about what could go wrong, who decides and what it costs.
Three principles
-
A person checks what matters.
Nothing that reaches a customer or costs money goes out without someone seeing it.
-
AI only gets access to what it needs.
Minimum permissions, keys locked away and your data kept out of places it shouldn't be.
-
Everything is logged and explained.
What each flow did and when, documented in your accounts.
How I do it
Tests before and after
I check the AI answers well on real cases before it goes live, and again after every change.
Safe from tricks
I protect flows against hidden instructions in emails or web pages that try to trick the AI.
Data looked after
GDPR, contracts with each provider, EU-hosted data where possible and backups.
Transparency
If a customer talks to an AI assistant, we tell them. It's the honest thing to do, and the EU AI Act asks for it.
Security vocabulary, without the jargon
- API keys
- The “key” that unlocks a tool. Kept locked away, never in an email.
- Secrets manager
- The safe where passwords and keys live.
- Least privilege
- Each piece gets only the access it needs, nothing more.
- 2FA / MFA
- A second step when signing in, like a code on your phone.
- SSO
- One company login for every tool.
- Encryption
- Data travels and is stored unreadable to anyone who shouldn't see it.
- Prompt injection
- Hidden instructions in an email or web page that try to trick the AI.
- Data leak
- Information ending up where it shouldn't.
- Shadow AI
- AI tools people use without anyone approving them.
- Audit log
- The record of who did what, and when.
- Anonymisation
- Removing names and personal details before AI sees them.
- EU data residency
- Keeping your data on European servers.
- DPA (data processing agreement)
- The contract that makes a provider look after your data.
- Backup
- So one mistake doesn't wipe out your work.
Let's talk
Got a workflow worth taming?
Book a free 20‑minute call. Tell me what's holding you back and I'll tell you honestly whether pleko is a fit.