Plauti offers several AI-assisted features, and there are more to come. While these features can be very useful and save you quite a bit of time, of course you will also want to know how your data is handled before you start using them.

The explanation below concerns the features where Plauti provides AI access. These are recognizable by the fact that you need to sign a Data Processing Agreement (DPA) before you can start using it. 
For other AI-assisted features, such ask the ‘Ask AI’ actions in Plauti Manipulate, you yourself decide how AI is accessed. Read more about data handling in such AI features at the end of this article, at ‘Other AI-assisted features’.

AI-assisted features managed by Plauti

No AI actions without a signed DPA

First of all, no data is processed or recommendations made using AI at all, unless the DPA (Data Processing Agreement) is signed for your Org or Environment. The different AI-assisted features cannot be enabled without a signed DPA. In turn, signing the DPA ensures your data is processed securely and in line with privacy regulations.

Only relevant data is processed

The AI-assisted features use data at different levels. For example, the AI Scenario Builder solely looks at which fields you have in use, not what is recorded in those fields. The AI Merge Recommendation and AI Match Recommendation features on the other hand need to view the content of record fields, to be able to give recommendations: about which fields to keep upon merge, or which records are likely to be duplicates. 

Plauti employs sub-processors for its AI-assisted features. However, data is sent for processing strictly at the request of Plauti, and only within the set boundaries; the AI provider does not have independent access to our systems.

The key tenets for AI data processing

When it comes to processing this data, these are the points we want to make clear:

• The AI-assisted features only process data requested by a user with the appropriate permissions in Salesforce or Dynamics.
• Only data relevant to the AI feature is retrieved.
• All data is sent to the LLM via SSL encryption.
• Data is removed after processing. Data is not stored by either Plauti or its sub-processors.
• Data is not used for AI training purposes by either Plauti or its sub-processors.

You are in charge

Furthermore, the suggestions made by the AI-assisted features are always visible for review, and require your confirmation before any changes are applied, unless explicitly stated otherwise. The AI Merge Recommendation, AI Match Recommendation and AI Scenario Builder features do not make any changes unless you confirm this first. 

Who is handling your data?

In the DPA document, which you can download for review before signing, you'll find a list of the different sub-processors employed by Plauti. These concern data handlers for all Plauti's apps and features. If a sub-processor handles data for the AI features specifically, this is mentioned in its description there (DPA, Annex IV: List of sub-processors).

Other AI-assisted features

Next to the DPA-regulated AI features mentioned above, Plauti also offers a number of AI-assisted features where you select and manage your own LLM for handling the data. Currently those are the ‘Ask AI’, ‘Ask ChatGPT’, and ‘Ask ChatGPT Vision’ actions in Plauti Manipulate; more might be added in the future.

When you use these ‘Ask AI/ChatGPT’ actions, the prompts, field values, and documents you include in an action configuration are sent to the AI model of your choice, as configured in the Action Library.

Via these actions, that AI model then only has access to:

• The main prompt and follow-up prompts you define in the action,
• The fields and their content that you explicitly reference in the prompts (using Field Variables),
• The selected records that are being processed by the action, and any records you added to that selection via ‘Add Additional Data’, 
• and any files you ask it to process via the action configuration.

The AI model (LLM) cannot query other records on its own, nor can it bypass your configured field selection for the selected records.