Frequently Asked Questions
Do I actually need AI for my business?
Probably not for everything. AI is useful for repetitive tasks, drafting, summarising, and finding patterns in information. But a spreadsheet, a template, or a simple conversation can often do the same job just as well. The question isn’t “can I use AI?” – it’s “does this task actually need AI?”
Is AI safe to use with customer information?
That depends on the tool, the information, and how you’re using it. Before you put any customer or employee information into an AI tool, check the provider’s data policy. Some tools use your inputs to train their models; others don’t. Some store your data; others don’t. Don’t assume – check.
What’s the difference between ChatGPT, Copilot, and Claude?
They’re all AI assistants, but they work in different ways and have different strengths. ChatGPT is the most widely used general‑purpose AI. Microsoft 365 Copilot is built into Microsoft 365 and can work with your emails, documents, and calendar. Claude is strong at reasoning and longer documents. The best one for you depends on what you’re trying to do.
Can I use AI to write content for my website?
Yes, but don’t publish AI‑generated content without checking it. AI can invent facts, get dates wrong, and produce text that sounds generic. Use it as a drafting tool – then add your own experience, check the facts, and make it sound like you.
Is AI going to replace my staff?
AI can replace some tasks – and that’s a good thing if the tasks are boring. But it’s much less good at judgement, creativity, and genuine human interaction. The businesses that use AI best aren’t replacing people; they’re giving their people better tools.
Do I need an AI policy for my staff?
If more than one person in your business uses AI, yes – but it doesn’t need to be long. A one‑page guide explaining which tools are approved, what information can’t be entered, and what needs checking is enough to start with.
Can I use free AI tools for my business?
You can – but be careful what you put into them. Free tools often use your inputs to train their models. That’s fine for brainstorming and ideas, but not for customer data, employee information, or anything confidential. If you need stronger data protection, look at the paid business tier.
Glossary – AI terms explained simply
A
AI (Artificial Intelligence)
Software that can perform tasks that normally require human intelligence – like understanding language, recognising images, or making decisions based on information.
AI Agent
An AI system that can take actions on your behalf – like sending an email, updating a record, or processing a refund – rather than just answering questions.
AI Hallucination
When an AI tool produces information that sounds convincing but is incorrect, invented, or unsupported. It can happen with any AI tool, and it’s a good reason to check important answers.
API (Application Programming Interface)
A way for one piece of software to talk to another. When you use AI through an API, your own software sends information to the AI service and gets a response – often charged per use rather than a fixed monthly fee.
API Key
A unique code that identifies you to an API service – like a password for software. Never share your API key or put it into an AI chat.
Automation
A process that runs automatically – like a script that processes a spreadsheet every week without you having to do it manually.
C
Chatbot
An AI assistant you interact with by typing questions – like ChatGPT, Claude, or the chatbot on a website.
Copyright
Legal protection for creative work. AI‑generated content may not be fully protected by copyright in the UK if there’s minimal human input. The law on this is still developing.
CSV (Comma‑Separated Values)
A simple file format for storing spreadsheet‑like data. Many business systems let you export data as CSV, which is easy for Python scripts to process.
D
Data Controller
Under UK GDPR, the organisation that decides why and how personal information is processed. That’s usually you, the business owner – even if you use AI to help.
Data Minimisation
A UK GDPR principle: only collect and process the personal information you actually need for the purpose. Don’t paste an entire customer file into an AI tool if you only need a summary.
Data Processing Agreement (DPA)
A contract between a data controller and a data processor that sets out what personal information is processed, how it’s protected, and what happens to it when the contract ends. Required under UK GDPR when a third party processes personal data on your behalf.
Data Processor
An organisation that processes personal information on behalf of a data controller – like an AI provider that handles your customer data.
Data Protection Impact Assessment (DPIA)
An assessment required under UK GDPR when processing personal data is likely to create a high risk to individuals. You’re more likely to need one if using AI to make automated decisions about people.
Data Protection Officer (DPO)
A role required under UK GDPR for some organisations – but not typically for small businesses unless they process large amounts of sensitive data.
Dependencies
Extra pieces of code that a Python program needs to run. For example, the pandas library is used to work with spreadsheets and data.
E
Equality Act 2010
UK law that protects people from discrimination. It applies to AI‑assisted decisions just as it applies to human‑made decisions – including recruitment, promotion, and customer service.
F
Fair Dealing
A UK legal principle that allows limited use of copyrighted material without permission. It’s narrower than the US “fair use” and doesn’t apply as broadly to AI training.
G
GOV.UK
The UK government’s official website – a reliable source for legal, regulatory, and policy information.
GPDR (General Data Protection Regulation)
The EU data protection law. The UK has its own version – UK GDPR – which applies to businesses processing personal information in the UK.
H
Hallucination
When an AI tool produces a confident‑sounding answer that’s actually wrong or invented.
HMRC
HM Revenue & Customs – the UK tax authority. Always check AI‑generated tax information against official HMRC guidance.
I
ICO (Information Commissioner’s Office)
The UK’s data protection regulator. The ICO enforces UK GDPR and provides guidance on AI and data protection.
IP (Intellectual Property)
Legal rights over creative work – including copyright, trademarks, and patents. AI‑generated content can create IP uncertainties.
L
Legislation.gov.uk
The official UK website for legislation – the best source for the exact wording of UK law.
N
NCSC (National Cyber Security Centre)
The UK’s cyber security authority. The NCSC provides guidance on AI security risks, including prompt injection and hallucinations.
P
Personally Identifiable Information (PII)
Information that can identify a person – like names, addresses, email addresses, and phone numbers. Protected under UK GDPR.
Processor
An organisation that processes personal data on behalf of a controller – like an AI provider handling your customer data.
Prompt
The instructions you give to an AI tool. A clear, specific prompt usually gets a better answer than a vague one.
Prompt Injection
A security risk where hidden instructions in documents or web pages cause an AI system to behave unexpectedly – for example, ignoring its usual rules.
Python
A free, widely used programming language. AI tools are good at writing Python code, making it useful for automating small business tasks.
S
Shadow AI
AI tools that staff use without the business knowing about it – often free consumer versions of AI tools. This creates data protection and security risks.
Special Category Data
Highly sensitive personal information – like health data, racial or ethnic origin, political opinions, or biometric data. Subject to stricter protection under UK GDPR.
Streamlit
A free tool that turns a Python script into a simple web page with buttons and upload boxes – making it easy for non‑technical people to use.
Sub‑processor
A third party that a processor uses to help process data. For example, your AI provider might use a cloud hosting company as a sub‑processor. UK GDPR requires processor contracts to address sub‑processors.
U
UK GDPR
The UK’s data protection law – the UK version of the EU GDPR. It applies whenever you process personal information, including when using AI.
Got a question we haven’t answered?
If there’s an AI term or question you’d like us to explain, drop us a line – we’re always adding to this page.
Explore more free resources →