Free GenAI tools lack suitable management and oversight and information entered may be used to train the model, so the Guidelines counsel public bodies not to use them. Consistent with NCSC advice, anything the organisation would not publish, among it classified material, personal data, commercially sensitive material and internal Government business, never goes into a public GenAI tool.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.