Services — AI data protection
We decide what may go into AI,
using your actual documents.
We set out which information staff may and may not enter into generative AI, then align your AI service settings and internal access rights with those rules. For documents that cannot leave your company, we can also run the AI on your own machines.
01
Who this is for
Staff have started using generative AI on personal accounts, and there is no rule on whether client names or quoted prices may be entered.
You handle customer names and contact details and need to know where anything entered into AI is stored.
A client has asked you to explain how you use AI and how you handle their information.
02
What you receive
An AI use policy for staff
A list of what may and may not be entered into AI, illustrated with your own quotations, customer lists, and other real documents.
AI service settings review
In your own accounts, we check whether your inputs feed model training, how long chat history stays, and who can open shared links, then record every change we make.
Access rights by document
We map which departments and roles may let AI read which folders, then apply that map to the access settings of your AI tools.
AI that runs on your own machines
For documents that must not leave your company, the AI itself sits on your machines, and everything from reading to drafting stays in-house.
A statement for your clients
We draft a reply, based on the rules you adopt, for when a client asks how you handle their information with AI.
03
Pricing
- Setup
- 0 JPY.
- Policy, settings review and access mapping
- We ask how many people and documents are involved, then present the amount in writing before we start.
- AI on your own machines
- Provided as the fully in-house plan of the AI back-office assistant, at 29,800 JPY a month before tax.
The full price list is on the pricing page.
04
What we do not take on
We do not handle applications for certifications such as ISMS or the PrivacyMark.
Judgments under the Act on the Protection of Personal Information and other laws are subject to review by a lawyer or other qualified professional.
Penetration tests and other security assessments, and investigations after a data breach, are outside our scope.
Use from employees’ personal phones cannot be blocked technically. We address it through the use policy and by moving staff onto company accounts.
05
How it works
-
01
Current use
We ask which AI services you use and which kinds of documents you want AI to read.
-
02
Draft rules
We present the draft policy and access map in writing, and you decide the final content.
-
03
Settings and handover
We apply the agreed rules to your AI services and folder settings, and hand over a record of every change.
06
Frequently asked questions
If we enter company information into a free AI service, will it be used for training?
It depends on the service and the plan. Many business plans state in their terms that inputs are not used for training, while personal plans may require you to change a setting. We check the terms and settings of the accounts you actually use.
Can we use AI without any data leaving the company?
Yes, if the AI itself runs on your own machines: reading the documents and drafting both stay in-house, at 29,800 JPY a month before tax. Output quality and speed then depend on the performance of your hardware.
Do we need to hand our data over to you?
No. We work with the originals left on your machines and do not store them on our servers.
Can you also get ISMS or PrivacyMark certification for us?
We do not handle certification applications. Our work covers the rules for using AI inside your company, the settings of your AI services, and access rights.
Can you tell us whether we comply with Japan’s personal information law?
Legal judgments are for a lawyer or other qualified professional to confirm. We put in place the procedures and settings that keep customer personal data out of AI tools.
Tell us which AI services you use and what kinds of documents you handle, and we will suggest where to draw the first lines.