Typical forLaw firms and solicitorsAccountants and bookkeepersEstate agentsPension and investment advisers
AI on client matters. Your clients' names stay in the EU.
Review contracts, summarise case files and draft letters in minutes. GoalCube hides client names, other parties, ID and company numbers and code names before the AI sees anything.
- Confidential, just like beforeThe AI sees codes – never the client's name, the other party or the amounts you want hidden.
- Secret deal namesAdd your own terms, such as an acquisition's code name. They're hidden everywhere.
- Documented useEvery use of AI is in your AI inventory, ready for the client or the regulator.
| Client | Company no. | Contact | Matter |
|---|---|---|---|
| Atlantic Catch Ltd | 654321 | Michael Byrne | Acquisition |
| Salon Julia Ltd | 723456 | Julia Spiteri | Annual accounts |
| Brian Dunne | 812345 | Brian Dunne | Probate |
Meeting note Meeting with Michael Byrne about Project Osprey: Atlantic Catch Ltd wants to buy Kinsale Smokehouse Ltd. Due diligence must be finished by 1 December. Company no. 654321.
| Client | Company no. | Contact | Matter |
|---|---|---|---|
| [KLIENT_1] | [CVR_1] | [PERSON_1] | Acquisition |
| [KLIENT_2] | [CVR_2] | [PERSON_2] | Annual accounts |
| [KLIENT_3] | [CVR_3] | [KLIENT_3] | Probate |
Meeting note Meeting with [PERSON_1] about [PROJEKT_1]: [KLIENT_1] wants to buy [VIRKSOMHED_1] Due diligence must be finished by 1 December. Company no. [CVR_1].
Atlantic Catch Ltd: due diligence on the acquisition must be finished by 1 December; run a conflict check on the other side. Salon Julia Ltd: annual accounts missing receipts for March and April; deadline 31 January. Brian Dunne: estate after the mother's death; set up a meeting.
[KLIENT_1]: due diligence on the acquisition must be finished by 1 December; run a conflict check on the other side. [KLIENT_2]: annual accounts missing receipts for March and April; deadline 31 January. [KLIENT_3]: estate after the mother's death; set up a meeting.
Fictitious data. Point at a name or a pseudonym to see what belongs together.
What can you use AI for?
Choose a task. GoalCube works out the risk under the EU AI Act with fixed rules and tells you what to do.
Low risk under the AI Act. But professional secrecy and GDPR apply: GoalCube hides names, numbers and your secret terms.
Low risk. The responsible adviser reads the text and stands behind it.
Credit scoring of individuals is listed in Annex III of the AI Act. A person decides.
Turning down a client matters to that person. The AI may prepare; a member of staff decides.
The example is simplified. In GoalCube you answer a few questions, and the classification follows fixed rules.
What the law says
Professional secrecy and confidentiality
Lawyers, accountants and advisers have strict duties of confidentiality. The AI provider must get no more than the task needs.
National professional secrecy rules for lawyers and accountants
Clients are often people
A sole trader or a deceased person's estate is about people. Names, ID numbers and finances are personal data.
Article 4(1) GDPR
Transfers out of the EU
Sending client data to an AI in the US is a transfer that needs a legal basis – and the client may require that data stays in the EU.
Articles 44–46 GDPR
Short and simplified. GoalCube helps you follow the rules; it is not legal advice.
Your staff keep working. GoalCube keeps track of the rest.
Low risk is approved automatically under fixed rules. Anything that needs a human lands on This week’s list – typically around 5 minutes a week.
Summarise November's matters, and find the deadlines we have to meet.
Here's the summary with five deadlines. Client names, company numbers and the acquisition's code name are only at GoalCube.
4 awaiting a human · approx. 5 minutes
Waiting for you
- Check use: AML checks on new clientsDecision about a person · needs a person
- Confirm new use: contract reviewLow risk · approve the rule
Approved automatically
- Summary of customer enquiriesLow risk · approved automatically on Monday
- Overview of supplier contractsLow risk · approved automatically on Tuesday
What you need
Start free with the overview. Add protection when you want to use AI on real data.
AI Map
Map
0 € per month
- AI inventory and AI policy
- Training with proof
- Deadlines, templates and report
Data Vault
Map and protect
from 9 € per month
- Everything in AI Map
- AI on your data, data stays in the EU
- Secret terms and documents
Data Vault + Human Decision
GoalCube for HR
from 15 € per month
- Everything in Data Vault
- A person decides on cases about people
- Passkey, log and timestamps
See all prices All prices are per month and exclude VAT. Pay yearly and get 2 months free. Prices apply from launch, which we expect in November 2026.
Questions and answers
Can lawyers use ChatGPT?
AI can be used if you keep to professional secrecy and GDPR: a business plan, a data processing agreement (DPA), no training on your data – and ideally no client names in the AI. With GoalCube the AI only sees codes.
Can we hide a deal's code name?
Yes. Add it as a secret term in GoalCube. It's hidden in every dataset, whatever the capitalisation or spelling.
Is company data protected too?
GDPR protects people, but GoalCube also hides company names, company numbers, contracts and amounts when you choose to.
Read more
- GDPR and AI
Can we put contracts, prices and customer lists into an AI?
2 min readPrices, contracts, customer lists and project names are trade secrets – but only if you protect them. Here is how to use AI without giving them away.
- GDPR and AI
Can we send personal data to a US AI? International data transfers under GDPR
3 min readSending personal data to ChatGPT, Claude or Copilot in the US is a transfer out of the EU. The legal bases, the Data Privacy Framework and the safest route.
- AI in practice
AI for contracts and procurement: How to use AI without giving your terms away
2 min readAI is good at finding deadlines and terms in contracts. What to watch out for: contact persons, confidentiality clauses, prices and project names.
- ChatGPT, Copilot and other AI services
ChatGPT and GDPR: Can businesses use ChatGPT on personal data?
2 min readBusinesses can use ChatGPT, but only with the right plan, a data processing agreement and control over the data. The checklist, and how names stay in the EU.
Other solutions for customers
- Online shop customers
- Guests
- Software users
- Members
- Subscribers
- Patients and clients in healthcare
- Students and learners
- Tenants
- Policyholders
- Borrowers and credit customers
- Passengers and travellers
- Donors and supporters
- Event attendees and registrations
- B2B customers
- Property buyers and sellers
- Residents in care and supported living
- Citizens
Ready to use AI on client data?
We expect to launch in November 2026. Join the waitlist and we’ll let you know when you can get started.