AI on customer data. Customer names stay in the EU.
Guests, members, users, patients or tenants: your customers go by different names, but the rules are the same. The AI only gets pseudonyms, and you can show you are on top of it.
Customers, guests, members and users
- Online shop customersCustomer service, returns and reviews with AI – without your customers' names leaving the EU.Online shops · Retail chains · Brands
- GuestsBookings, complaints and reviews with AI – without your guests' names leaving the EU.Hotels · Restaurants · Attractions and experiences
- Software usersSupport tickets, bug reports and user feedback with AI – without your users' data leaving the EU.SaaS and apps · Gaming · Platforms and marketplaces
- MembersMember lists, fees and enquiries with AI – without your members' names leaving the EU.Clubs and associations · Gyms and fitness centres · Trade unions and trade associations
- SubscribersCancellations, complaints and invoices with AI – without your subscribers' names and account numbers leaving the EU.Media and newspapers · Telecoms · Streaming
- Patients and clients in healthcareBookings, clinical notes and enquiries with AI – without health data and names leaving the EU.Private clinics · Physiotherapists · Dentists
- Clients of advisersCase files, contracts and client emails with AI – without your clients' names and figures leaving the EU.Law firms and solicitors · Accountants and bookkeepers · Estate agents
- Students and learnersAssignments, admissions and feedback with AI – but a person does the grading, and names stay in the EU.Private and boarding schools · Language schools · Training and continuing education
- TenantsApplications, repair requests and rent arrears with AI – a landlord decides, and names stay in the EU.Landlords and property companies · Housing associations · Property managers
- PolicyholdersClaims, quotes and customer service with AI – with names and health data in the EU and a person who decides.Insurers · Insurance brokers · Pension funds
- Borrowers and credit customersCredit applications, payment plans and collections with AI – credit scoring is high-risk, and a person decides.Banks and credit unions · Finance companies · Buy now, pay later
- Passengers and travellersBookings, delays and complaints with AI – without passport numbers and names leaving the EU.Travel agencies · Bus and ferry operators · Airlines
- Donors and supportersThank-you letters, appeals and donor analysis with AI – without your supporters' names and gifts leaving the EU.Charities · Foundations · Fundraising campaigns
- Event attendees and registrationsRegistrations, name badges and feedback with AI – without your attendees' names leaving the EU.Conferences and events · Courses and workshops · Races and fun runs
- B2B customersQuotes, CRM notes and account analysis with AI – without customer names, prices and contacts leaving the EU.Wholesalers · B2B software · Manufacturing
- Property buyers and sellersProperty listings, viewings and buyers with AI – without your clients' finances and names leaving the EU.Estate agents · Property developers · Development consultants
- Residents in care and supported livingCare notes, shift handovers and letters to families with AI – without residents' names and health data leaving the EU.Private nursing homes · Supported living · Home care
- CitizensApplications, enquiries and grants with AI – access to public services is high-risk, and a person decides.Independent non-profit institutions · Private providers to local authorities · Utilities
What the law says
GDPR applies, in the chat too
Names, emails and order numbers in a prompt are personal data. You need a legal basis, should use as little as possible and need an agreement with the AI provider.
Chatbots must say they are AI
From 2 August 2026, people must be able to see that they are talking to an AI (Art. 50).
Credit, insurance and education are high-risk
AI that assesses creditworthiness, prices life and health insurance or grades students is listed in Annex III.
Sensitive data needs more care
Health, religion and trade union membership are special category data (Art. 9 GDPR). They should not be sent to the AI in plain text.
Short and simplified. GoalCube helps you follow the rules; it is not legal advice.
Be among the first.
We expect to launch in November 2026. Join the waitlist and we’ll let you know when you can get started.