Can I use that custom GPT or plugin from the store?
Custom GPTs and plugins can ship prompts and files to whoever built them. The barrier to install is very low, the risks are not.
Try this first
- 1Check who built it. A random hobbyist offering a free tool that wants to read your full PDF: not for work files.
- 2Read what actions it performs. 'Internet access', 'Code execution', and 'External API calls' mean your input can land on the builder's server.
- 3For business data: only use plugins from vendors you already have a contract with (Atlassian, Salesforce, etc.) and verify a DPA is in place.
- 4ChatGPT Team admins: default to 'no plugins' and approve per tool. That is a checkbox, not a project.
- 5Building your own internal GPT is fine, but the document you upload stays until someone deletes it. Keep that managed.
When to bring us in
Unsure about a specific plugin for business use: send us the name and we will check vendor and permission model.
See also
- Can I paste a customer file or email into ChatGPT?Depends on the account and settings. Free ChatGPT and a Team tenant behave very differently from what most people assume.
- I want a one-page AI policy for my teamA real one-pager beats a thick document nobody reads. Four headers and concrete examples.
- How do I tell if an AI answer is made up?Models sound confident even when they are wrong. A few habits catch most mistakes.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.