AI is useful for the reading, sorting and drafting that fills an admin day: pulling details from bills, sorting email, drafting routine replies and checking data entry. It should not decide anything about people or money on its own. M.A. Whately uses it for the first kind of work only, with a person checking every result and data kept in the EU where possible.
Used for, and not used for
GDPR applies whenever personal data is processed, whether by a person or by software. When a business uses the M.A. Whately Suite to collect documents or information from its own customers, staff or suppliers, that business is the controller, and M.A. Whately processes the information on its behalf under a written agreement.
Article 22 of GDPR gives people the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on them. M.A. Whately does not use personal data for decisions of that kind. A person checks the results.
The EU AI Act, Regulation (EU) 2024/1689, entered into force on 1 August 2024 and applies in stages. It covers businesses that use AI systems in their work, not only the companies that build them. What it asks depends on the use: a short list of practices has been banned since 2 February 2025, and uses such as recruitment or assessing creditworthiness are classed as high-risk, with extra duties.
The work on this page, reading documents, sorting email and drafting text that a person checks, is chosen to stay well away from those uses. This page explains the firm's approach. It is not legal advice on your own obligations.
How a review works
A conversation with Adrian about the job that takes the most time, and whether automating it is worth it.
What would change, an estimate of the hours saved, the cost and the safeguards, agreed before anything is built.
Built and tested with your own data, and checked by a person, before anything goes live.
Documented and owned by your business, your team shown how it works, with support afterwards.
It can. The Act applies to businesses that use AI systems in their work, not only to the companies that build them, and what it asks depends on the use. Reading documents and drafting text for a person to check is very different from using AI to screen job applicants or decide on credit. For a view on your own position, take legal advice.
The Bills & Receipts Inbox and Receipt Capture read the text on a bill or receipt with optical character recognition, which runs in your browser. You check the supplier, VAT and totals before anything is exported.
No. M.A. Whately does not use personal data for automated decisions that have legal or similarly significant effects on people. AI is used to read, sort and draft, and a person checks the result.
In the EU where possible. The Suite's own database is in Ireland and its web servers run in Dublin. If a project uses a service based outside the EU, the written plan names it and where data goes, and transfers are covered by the EU-US Data Privacy Framework or standard contractual clauses.
Next step
Review requests go straight to Adrian Capraru, who replies by email. Or start with the free tools on the Suite today.
We use cookies the site needs to work. With your permission we would also use Google Analytics to see how the site is used, and Google Ads cookies to measure our adverts. Nothing optional is set until you choose, and you can change your mind any time with "Cookie settings" at the foot of every page. Privacy policy
Newsletter
Budget changes, Revenue deadlines, new free tools and what AI means for your business, from M.A. Whately.
