Compliance
The rules that apply when your data meets AI.
What GDPR, UK GDPR, the EU AI Act, Swiss nFADP, HIPAA, PCI DSS, DORA and FINMA ask of companies that send data to AI models, and where masking helps.
- ComplianceGDPR and AI: using ChatGPT, Claude and LLM APIs with personal dataWhat the GDPR asks of you when staff and applications send personal data to ChatGPT, Claude or an LLM API, and how masking supports minimization and pseudonymization.10 min read
- ComplianceUK GDPR and AI: the Data Protection Act 2018, ICO guidance and US AI providersHow the UK GDPR, the Data Protection Act 2018 and ICO guidance apply when UK organizations use AI models, including transfers to US providers over the UK-US data bridge.6 min read
- ComplianceEU AI Act for companies using AI: obligations, timeline and how it meets the GDPRWhich EU AI Act obligations apply to companies that use general-purpose AI tools, which apply to companies that build AI systems, and the timeline after the 2026 Digital Omnibus.6 min read
- ComplianceSwiss nFADP and AI: the revised Data Protection Act, personal fines and AI providersHow the revised Swiss Federal Act on Data Protection applies to AI tools, why its fines target responsible individuals, and what cross-border disclosure means for US AI providers.6 min read
- ComplianceHIPAA and AI tools: PHI, BAAs with AI vendors and Safe Harbor de-identificationHow HIPAA applies when clinicians and health apps send protected health information to AI tools: business associate agreements, Safe Harbor's 18 identifiers and the minimum necessary rule.7 min read
- CompliancePCI DSS and AI: keeping card numbers out of prompts and out of scopeWhy card numbers in prompts pull AI tools into PCI DSS scope, what v4.0.1 says about masking and sensitive authentication data, and how to keep PANs out of AI providers.6 min read
- ComplianceDORA and FINMA on AI: third-party risk and governance for financial institutionsHow DORA's ICT third-party risk rules treat AI providers for EU financial entities, and what FINMA Guidance 08/2024 expects from Swiss institutions using AI.6 min read
See it on your own data
Try Maskflare free.
Bring your hardest prompts.
28-day free trial or 10,000 requests, whichever comes first. Point one app at the gateway or enroll a few laptops,
and watch what gets masked. Or talk to us first.
- SOC 2 Type II: In progress
- ISO 27001: In progress
- EU hosting by default · on-premises available
- Prompts and files never stored
- Never used to train AI models
- GDPR · nDSG · DPA available
- Trust center →