ENSURING INFORMATION PROTECTION WHEN WORKING WITH MODERN ARTIFICIAL INTELLIGENCE TOOLS

Authors

DOI:

https://doi.org/10.62405/osiconf.2026.49

Keywords:

artificial intelligence; information security; local AI systems; AI agents; confidential information; corporate data.

Abstract

The study aims to systematize information security risks arising from the use of modern artificial intelligence tools and to substantiate the feasibility of deploying such tools locally for processing restricted-access information. The methodology combines structural and functional analysis, classification of information flows, comparative analysis of local and cloud deployment models, and assessment of information security threats. The results systematize the types of data provided to AI chatbots, AI workflows, and AI agents in personal and corporate environments and identify risks associated with transferring such data to external services. The analysis shows that local model execution, when combined with appropriate network and administrative controls, can keep data processing within a controlled security perimeter. The study concludes that local AI solutions should be prioritized for confidential information, while recognizing the need for adequate hardware resources, qualified personnel, integration skills, and security procedures.

References

Anthropic. (2026). Does Anthropic act as a data processor or controller? Anthropic Help Center. https://support.anthropic.com/en/articles/9267385-does-anthropic-act-as-a-data-processor-or-controller

Google. (2026). Generative AI in Google Workspace Privacy Hub. Google Workspace Help. https://knowledge.workspace.google.com/admin/generative-ai/generative-ai-in-google-workspace-privacy-hub

LM Studio. (2026). Offline operation. https://lmstudio.ai/docs/app/offline

Microsoft. (2026). Enterprise data protection in Microsoft Copilot and Microsoft Copilot Chat. Microsoft Learn. https://learn.microsoft.com/en-us/microsoft-365/copilot/enterprise-data-protection

n8n. (2026). Privacy policy. https://n8n.io/legal/privacy/

NIST. (2024). Artificial intelligence risk management framework: Generative artificial intelligence profile (NIST AI 600-1). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.AI.600-1

OpenAI. (2026). Business data privacy, security, and compliance. https://openai.com/business-data/

OpenAI. (2026). Data controls in the OpenAI platform. https://platform.openai.com/docs/models/default-usage-policies-by-endpoint

OWASP. (2025). OWASP Top 10 for large language model applications. OWASP GenAI Security Project. https://genai.owasp.org/llm-top-10/

Ollama. (2026). Privacy policy. https://ollama.com/privacy

Downloads

Published

2026-10-14