Will my personal or financial details ever be typed into a public AI tool?

No. As a rule, Serra does not put live client data into public or consumer AI tools. When AI is involved, your data is handled only inside contracted, security-assessed environments with a lawful basis, a DPIA where required, and human review of the output.

What lawful basis does Serra rely on to process my data with AI?

Serra processes client data only where there is a documented lawful basis under applicable data-protection law, assessed as part of the client relationship and, where the risk warrants it, a data-protection impact assessment. Processing does not proceed without that basis in place.

Does Serra use my data to train AI models?

Serra's protocol keeps client data out of public and consumer tools, which is where uncontrolled retention and training risk live. Client data is processed only in contracted environments governed by a data-processing agreement that defines, and constrains, how a provider may use it.

Can I ask Serra how my data is handled?

Yes. Serra's approach is designed to be explainable and documented, the contract, the security assessment, the lawful basis, the DPIA, and the human-review step are each recordable. If you want to understand how your information is handled, that is a question Serra can answer specifically.

Is this the same standard Serra recommends to other advisers?

Yes. The rule Serra applies to itself, no live client data in public tools; AI only in contracted, assessed, lawful, DPIA'd, human-reviewed environments, is the same standard our companion article sets out for advisers across the EU, UK, and US. Serra holds itself to the boundary it describes. --- This article describes how Serra Wealth protects client data in its use of AI (Serra Education: process and tooling). It is not investment advice. Serra Wealth uses AI tools in its operations under human oversight and in line with applicable data-protection law.

How does Serra protect your data when it uses AI?