The hype around generative AI is real, but so are AI risks and the pressure to justify your decisions, especially in regulated industries. Whether you’re fielding questions from your board, compliance team or most tech-savvy end users, the conversation always circles back to two things: security and privacy. We have spent a lot of time digging into the security and privacy documentation for six of the biggest GenAI platforms on the market. Here’s what you need to know before you roll them out. Microsoft Copilot If you’re already a Microsoft 365 shop, Copilot is the safest first step. It’s built with regulated industries in mind, layering on encryption, zero trust architecture and data isolation between tenants. Authentication runs through EntraID, so your existing permissions and policies carry over. Microsoft acts as a data processor under its data processing agreement, and — crucially — your prompts and responses aren’t used to train its models. Web queries are anonymized, and you get full audit logs and eDiscovery through Purview. Don’t use the consumer version for anything regulated. Stick to enterprise deployments. OpenAI ChatGPT ChatGPT is the most popular GenAI platform in the world, but not all versions are created equal. The enterprise, business and API versions offer robust security, SOC 2 Type II and ISO certifications, and external penetration testing. You own your data, and by default, it’s not used for training unless you opt in. But here’s the catch: The consumer versions (free and plus) are not recommended for regulated environments. Data may be retained and used for training unless you explicitly opt out, and admin controls are minimal. If you’re in finance, healthcare or any regulated space, opt for enterprise. Google Gemini Google’s Gemini is all-in on AI, and its enterprise deployments (via Google Cloud or Workspace) come with strong security features: AES-256 and TLS encryption, identity and access management controls, and VPC Service Controls. By default, Gemini doesn’t train on customer data unless you opt in. However, consumer-facing Gemini apps don’t offer the same controls and may retain data longer. If you’re a Google Workspace institution, Gemini is a solid choice. Otherwise, steer clear of the consumer apps for anything sensitive. TECH TALK GenAI Security and Privacy: What IT Pros Need to Know Jon Waldman President and Co-Founder, SBS CyberSecurity 14 NEBRASKA BANKER
RkJQdWJsaXNoZXIy MTg3NDExNQ==