There is no blanket yes
POPIA does not ban every AI tool. It also does not clear one because you pay for it. The question is the workflow. What moves. Why. Who processes it. Where it goes.
A client file can hold personal information. It can also hold secrets your contract protects. You have to check both.
I'm not your lawyer. This page is not legal advice. Read the two checks below. A lawyer still has to review your facts.
Read the two checks we already published
Start with can staff paste client files into ChatGPT. It asks you to map the file, the account and the trip the prompt takes.
Then read how private AI can help with POPIA. It says what a private setup can change. It also says what it cannot settle for you.
Use both. Don't stop at the tool name. A paid plan is not the legal answer. A company login is not either.
What private AI changes
Private AI means the work runs on equipment we choose, deploy and look after. The aim is that client files are not pasted into a public chat.
Your team can ask a Company Brain that holds only the files you approved. You decide who can ask. The answer should point back to the source.
That can reduce one kind of exposure. It is a design choice. It is not a compliance badge.
What private AI does not change
You still need a lawful purpose. You still keep the file to what the task needs. You still name who can see it.
You still decide how long it stays. A person still checks the output before it reaches a client.
A system in your office can still leak. Weak access. A bad backup. A person who exports the file. Location is not the whole job.
If personal information may leave South Africa, take section 72 to your lawyer. I will not answer that for your firm from this page.
Our data and security page says how we handle information here, and what we agree before a build. It is not a legal opinion.
Run this check this week
Pick one task your staff already do in a chat window. Write down the fields that task needs. If a made-up file is enough, use that.
Name the person who may approve the real workflow. Write the one line your staff can repeat on a busy day. If you cannot say it, they cannot follow it.
Then stop. Take that note to your Information Officer and to a lawyer. Don't put a live client file in until they have reviewed it.
A client file is not a test prompt.
Want help mapping one workflow? Ask for an audit. A lawyer still reviews the legal call.
Ask for an auditSources behind this page
Here's where the public figures on this page come from. They aren't our client results. They don't endorse us. And they're no substitute for your own professional advice.