Can I use AI with client files? A safe starting point for coaches, therapists, doctors and lawyers

Quick question. When you think about using AI in your practice, what comes up first? For most of the doctors, lawyers, therapists and accountants I work with, it's the same thing: "What happens to my clients' data?"

Good. That's the right question. And the answer is not "never use AI". It's "start where client files aren't involved".

Start with the admin that never touches a client file

Most of the hours you lose every week have nothing to do with confidential information. They're the work around it:

  • Coach: your welcome email, your session reminder, your follow-up template.
  • Therapist: rescheduling messages and the answers to the same five practical questions.
  • Lawyer: first drafts of standard letters from your own templates, deadline reminders.
  • Doctor: appointment reminders and practice admin, not patient records.
  • Accountant: chasing missing documents and reminders before every filing deadline.

None of this needs a single client name. That's where we start in every PartnerWithAI session.

Three rules that keep you safe

  1. You draw the line. Decide upfront which data AI may see and which it may not. Write it down. Nothing crosses that line without your OK.
  2. A human checks before anything goes out. Every workflow gets a review step, so nothing reaches a client or patient without a person reading it first.
  3. Know your tools. Check where a tool stores data and whether it uses your content for training. Business plans of the main AI tools usually let you switch that off. If in doubt, ask your data protection officer or your professional body.

What this looks like in practice

At the AI Bootcamp, participants bring one real task from their week. We pick a task without confidential data, build the workflow together, add the human check, and it runs before they leave. For firms, the Corporate AI Bootcamp starts with the same rule: practice admin first, client files only when you decide.

This article is a practical starting point, not legal advice. Your professional rules and GDPR still apply, and your DPO or advisor has the final word on your setup.

Your first step

Write down three tasks from this week that don't involve any client's name or file. That's your list. Pick one, and hand it to AI.

Want help doing it? Start with the free Tech Leak Score (two minutes), or book a 30-minute call.

Back to blog