Fear of cyberattacks slows AI, but platforms like Google's Gemini offer a safe path, experts at L8 Group point out.

According to a TOTVS study, 36% of Brazilian companies are still hesitant to invest in Artificial Intelligence for fear of cyberattacks and data breaches. However, the advancement of inherently secure platforms, such as Google's Gemini, hosted on one of the most robust cloud infrastructures in the world, is changing this paradigm. For experts at L8 Group, a leading technology and cybersecurity company, the key to secure innovation lies in knowing how to utilize the protection capabilities these platforms already offer.

"The fear of exposing sensitive data and opening new doors to threats is the main barrier to AI adoption; however, the choice of technology platform is a decisive factor in mitigating these risks. Companies' fear is understandable, but it stems from a perception that AI is a vulnerable black box. This is not true when we talk about models like Gemini. It is not a standalone tool; it operates within the Google Cloud ecosystem, which already has world-class security layers," explains Guilherme Franco, CTO of L8.

This means customer data is protected by advanced encryption, strict privacy policies that prevent its use for training public models, and an arsenal of control tools. According to Franco, security isn't an add-on; it's the foundation, which can be further customized when companies already use Google Workspace, integrating it with Vault's data retention policies, for example.

For companies looking to invest in AI securely using Gemini, L8 Group emphasizes that success depends on proper configuration and maximizing the security features available on the Google Cloud platform. Here are some points raised by cybersecurity expert Guilherme Franco:

1. Secure Infrastructure by Default: Gemini benefits from the same infrastructure that protects Gmail, Search, and YouTube. This includes denial-of-service (DDoS) protection, intrusion detection, and a private, encrypted global network.
2. Data and Access Control (IAM and VPC-SC): Google Cloud Identity and Access Management (IAM) allows you to precisely define who can access AI models and data. Additionally, with VPC Service Controls, companies can create a virtual security perimeter to prevent data leaks, ensuring that sensitive information doesn't leave the controlled environment.
   1. For Google Workspace users, Gemini respects the same access levels that were previously defined for access to company content, such as Google Drive, without the need for additional configuration.
   2. The same can be extended to users using platforms other than Google Workspace, such as Microsoft, when using Google Agentspaces with advanced IAM.
3. Privacy and Confidentiality: Google contractually guarantees that corporate data entered into Gemini via Google Cloud will not be used to train publicly accessible models. Control and ownership of the data remain entirely with the client company.
4. Responsible AI Safety and Filters: The Gemini platform itself has built-in safety filters to mitigate the generation of inappropriate, dangerous, or biased content, protecting not only data but also brand reputation.
5. “Local” data: It is possible to use tools such as NotebookLM, among others, which infer content simply by reading the files the user chooses, without using an external search database, such as the internet, reducing hallucinations and ensuring greater privacy.

Finally, the expert warns: "The question is no longer 'if' we will adopt AI, but 'how' we will do it securely and scalably. Platforms like Gemini solve much of the security complexity at the core. Our job at L8, for example, is to act as the strategic partner that customizes and implements these layers of protection: IAM, VPC, data governance; according to the reality and needs of each business. We transform the raw power of AI into a secure and future-ready competitive advantage. Most importantly, we build projects that truly work, because a recent MIT study revealed that 95% of AI projects fail," adds Franco.

He also warns that, regarding cybersecurity, in addition to the already well-known term ShadowIT, there's also ShadowAI, in which users utilize unapproved and insecure AI tools. "Other platforms train their AIs based on user input, including sensitive data, violating the LGPD. Consider the recent Grok case, which leaked more than 370,000 private conversations. To help detect and block the use of ShadowIT and ShadowAI, L8 Group offers solutions that provide visibility and control over what is being accessed, in accordance with cybersecurity policies," he concludes.