Before you trust an AI platform with your clients' data, make sure the platform deserves that trust.
AI SAFE™
PLATFORM DPA CHECKER
Every AI platform promises security.
Very few businesses ever verify what sits behind those promises.
The AI Safe™ Platform DPA Checkers help you understand whether the platforms you rely on actually provide the contractual safeguards UK GDPR expects before personal data is processed.
Whether you're using ChatGPT, Claude, Canva, Microsoft Copilot, Zoom, Calendly or Fresha, this guide shows you what to check, where to find it, and what to record as evidence.
Two practical reference guides. Updated for August 2026.
Most organisations assume:
"We're paying for the software, so everything must already be compliant."
It doesn't work like that.
Different account types carry different legal protections.
Some platforms provide comprehensive Data Processing Agreements.
Some only provide them on commercial plans.
Some don't currently provide one at all.
Most people never realise until they're already processing client data.
This guide has been written to help you verify your suppliers before they become part of your business.
WHY THIS IS DIFFERENT
A Data Processing Agreement (DPA) is one of the most overlooked parts of AI governance.
✓ Check whether your platform provides a Data Processing Agreement
✓ Understand which subscription level is required
✓ Verify where personal data is processed
✓ Understand international transfer safeguards
✓ Record evidence for your AI Tool Register
✓ Review new AI features before they process client information
✓ Know when platform changes require another review
WHAT THESE GUIDES HELP YOU DO
TWO REFERENCE GUIDES
Reference Guide 01
AI Platforms & Communication Tools
Covering the AI platforms professionals use every day.
Including:
• ChatGPT
• Claude
• Microsoft 365 Copilot
• Google Workspace & Gemini
• Canva
• Mailchimp
• Zoom
• Otter.ai
• WhatsApp Business Platform
• Instagram Direct Messages
• Midjourney
Each platform includes:
DPA availability
Minimum account required
Data location
International transfer safeguards
AI training position
Verification date
Practical observations
Key compliance considerations.
Reference Guide 02
Booking & Scheduling Platforms
Many businesses actively review AI tools.
Very few regularly review the systems quietly collecting client data every day.
Including:
• Fresha
• Treatwell
• Calendly
• Acuity Scheduling
• Square Appointments
• Booksy
Alongside:
consultation forms
AI meeting notes
automated decision-making
marketplace ranking
client communications
booking platform AI features
onward data flows into CRM systems
BUILD PRACTICAL CAPABILITY
This guide helps you answer questions such as:
Am I using the correct subscription for the way I process client data?
Does this supplier actually provide a Data Processing Agreement?
Where is my client data being processed?
Have new AI features changed how this platform works?
What evidence should I keep if I'm ever asked?
When should I review this platform again?
WHAT’S INCLUDED
What you'll be able to do
— Check AI suppliers before client data reaches them
— Understand the difference between consumer and business accounts
— Identify platforms that require further investigation
— Record supplier due diligence with confidence
— Monitor platform changes over time
— Strengthen your Article 28 governance
— Support your wider AI Safe™ documentation
— Implement immediately using practical verification checklists
The AI Safe™ Starter Pack is included — this guide builds directly on top of it.
INCLUDED IN YOUR REFERENCE LIBRARY
Rather than simply listing platforms, these guides explain:
Account Types
Processor Relationships
Transfer Safeguards
AI Feature Changes
Sub-Processors
Verification Dates
Practical Actions
Review Triggers
August 2026 Legal Updates
HOW AI SAFE™ FITS TOGETHER
This guide forms part of the wider AI Safe™ system
AI Safe™ Starter Pack
Understand the foundations before selecting AI suppliers.
Platform DPA Checkers (You're here)
Verify the platforms processing your clients' information.
AI Safe™ Legal Pack
Create the agreements, records and governance around those suppliers.
Emerging Risk Intelligence
Monitor how platform capabilities, AI features and legal expectations continue to evolve.
Learn how to operate well — not just how to avoid a mistake.
ESSENTIAL
AI Safe™ Platform DPA Checkers
Included
✓ AI Platforms & Communication Tools
✓ Booking & Scheduling Platforms