Skip to content
Espresso Data Privacy
EN
Request a demo

AI Privacy Control

Use AI – with control over the data

AI Privacy Control records your AI systems, classifies them and checks whether vendors keep their retention commitments. It shows which personal data sits in prompts, transcripts and content generated by Copilot, and what an AI can see via shared storage. AI Privacy Control builds on Data Discovery.

Request a demo All modules
ESPRESSO Dashboard AI systems Findings What the AI can see Evidence Configuration DashboardAI systems7Without DPA1Approved4Tolerated2Prohibited1 AI systemsNameProviderApprovalRisk classMicrosoft 365 CopilotMicrosoftApprovedMediumClaudeAnthropicApprovedMediumCustomer service chatbotself-hostedToleratedHighTranslation serviceThird partyToleratedLowImage generatorThird partyProhibitedHighViolated claimsCustomer service chatbot:retention max. 30 days – olderfindings existTranslation service: retentionmax. 7 days – older findingsexist
Simplified view with sample data.

What AI Privacy Control records

  • AI systems

    Vendors, models, place of operation, purpose, legal basis and risk class.

  • Contracts

    Data processing agreement, training with your data, reference to the data protection impact assessment, automated decisions.

  • Classification

    Approved, tolerated or prohibited – a management decision that not every role is allowed to change.

  • Claims

    What the vendor commits to, such as a maximum retention period or the exclusion of sensitive personal data.

What AI Privacy Control checks

  • Findings in AI data

    Personal data in the linked AI sources, by category and protection need.

  • Evidence

    The promised maximum retention period is checked against the findings: met or violated. Violated claims appear on the dashboard.

  • What the AI can see

    Shared objects that an AI such as Microsoft 365 Copilot can reach – for anyone with the link or for the entire organisation.

Working together with the other modules

Getting started

Assessment with a focus on Copilot and AI

See within six weeks what Copilot would find, which AI is in use and whether vendors keep their retention commitments. At a fixed price.

Go to the assessment

Frequently asked questions about AI Privacy Control

What is stored AI data?

Everything that is left behind when AI is used: prompts, chat histories, stored transcripts, content generated by Copilot and documents that AI assistants access.

Does AI Privacy Control monitor data traffic?

AI Privacy Control controls stored AI data and vendors' retention commitments. For a protected route to the AI, there is Privacy Delivery, which pseudonymises personal data before it is handed over.

How are claims checked?

The promised maximum retention period is checked against the findings in the linked sources; the result is either met or violated. Further claims, such as the exclusion of sensitive personal data, are recorded.

Does it work with Microsoft Copilot?

Yes. Data Discovery scans Microsoft 365 including Copilot data, and AI Privacy Control shows which shared objects Copilot can reach.

Who decides on the classification?

Classifying a system as approved, tolerated or prohibited is a management decision. Not every role is allowed to change it.

How do we get started?

With a 30-minute demo. Afterwards, we will clarify whether an assessment, a proof of concept or going straight to implementation is the right next step.

See Espresso in 30 minutes

We will show you the cockpit with sample data – and discuss where you should start.

Request a demo

or write directly to info@espressodataprivacy.com