{"id":67206,"date":"2026-08-12T09:00:00","date_gmt":"2026-08-12T07:00:00","guid":{"rendered":"https:\/\/symmy.com\/erpedie\/bezpecnost-ai-nad-firemnimi-daty\/"},"modified":"2026-08-12T09:00:00","modified_gmt":"2026-08-12T07:00:00","slug":"bezpecnost-ai-nad-firemnimi-daty","status":"publish","type":"erpedie","link":"https:\/\/symmy.com\/cs\/erpedie\/bezpecnost-ai-nad-firemnimi-daty\/","title":{"rendered":"Bezpe\u010dnost AI nad firemn\u00edmi daty: co si pohl\u00eddat, ne\u017e ji pust\u00edte k ERP"},"content":{"rendered":"

Kdy\u017e poprv\u00e9 navrhnete p\u0159ipojit AI k \u00fa\u010detnictv\u00ed, p\u0159ijde v\u017edycky stejn\u00e1 ot\u00e1zka: \u201eA neuvid\u00ed na\u0161e \u010d\u00edsla cel\u00fd internet?\u201c<\/em> Je to spr\u00e1vn\u00e1 ot\u00e1zka \u2014 a m\u00e1 konkr\u00e9tn\u00ed, ov\u011b\u0159iteln\u00e9 odpov\u011bdi. Tenhle \u010dl\u00e1nek je checklist: sedm v\u011bc\u00ed, kter\u00e9 rozhoduj\u00ed o tom, jestli je AI nad firemn\u00edmi daty bezpe\u010dn\u00e1, a p\u0159esn\u00e9 ot\u00e1zky, kter\u00e9 polo\u017eit ka\u017ed\u00e9mu dodavateli.<\/p>\n

Kr\u00e1tk\u00e1 odpov\u011b\u010f<\/h2>\n
\n

Bezpe\u010dn\u00e9 nasazen\u00ed AI nad ERP stoj\u00ed na \u010dty\u0159ech pil\u00ed\u0159\u00edch: data z\u016fst\u00e1vaj\u00ed ve va\u0161\u00ed datab\u00e1zi<\/strong> (AI se pt\u00e1, nekop\u00edruje), p\u0159\u00edstup je jen pro \u010dten\u00ed a jen k vybran\u00fdm agend\u00e1m<\/strong>, spojen\u00ed je zabezpe\u010den\u00e9<\/strong> (whitelisting IP nebo VPN, servery v EU) a ka\u017ed\u00fd dotaz se loguje<\/strong>. Na va\u0161ich datech se netr\u00e9nuj\u00ed modely. Kdo z t\u011bchto \u010dty\u0159 bod\u016f nespln\u00ed kter\u00fdkoli, nem\u00e1 nad \u00fa\u010detnictv\u00edm co d\u011blat.<\/p>\n<\/div>\n

Sedm v\u011bc\u00ed, kter\u00e9 si pohl\u00eddat<\/h2>\n
    \n
  1. Kde data fyzicky jsou.<\/strong> Va\u0161e datab\u00e1ze z\u016fst\u00e1v\u00e1 tam, kde je \u2014 v ERP. AI vrstva do n\u00ed pos\u00edl\u00e1 dotazy a dost\u00e1v\u00e1 odpov\u011bdi; nevznik\u00e1 \u017e\u00e1dn\u00e1 druh\u00e1 kopie \u00fa\u010detnictv\u00ed \u201en\u011bkde v cloudu\u201c. Ptejte se: kop\u00edrujete na\u0161e data, nebo se do nich dotazujete?<\/em><\/li>\n
  2. Kdo sm\u00ed co \u010d\u00edst.<\/strong> Rozsah ur\u010dujete vy: kter\u00e9 agendy AI uvid\u00ed (t\u0159eba pohled\u00e1vky a sklad ano, mzdy ne) a jestli sm\u00ed jen \u010d\u00edst, nebo i p\u0159ipravovat z\u00e1pisy. Za\u010d\u00edn\u00e1 se v re\u017eimu jen pro \u010dten\u00ed.<\/li>\n
  3. Jak vypad\u00e1 spojen\u00ed.<\/strong> \u0160ifrovan\u00fd p\u0159enos je samoz\u0159ejmost; rozd\u00edl d\u011bl\u00e1 whitelisting IP adres nebo VPN<\/strong> \u2014 k datab\u00e1zi se nedostane nikdo jin\u00fd ne\u017e ov\u011b\u0159en\u00e1 slu\u017eba. Servery v EU \u0159e\u0161\u00ed i pr\u00e1vn\u00ed str\u00e1nku.<\/li>\n
  4. Tr\u00e9nuj\u00ed se na tom modely?<\/strong> Spr\u00e1vn\u00e1 odpov\u011b\u010f je ne. Va\u0161e dotazy a data se nepou\u017e\u00edvaj\u00ed k tr\u00e9nov\u00e1n\u00ed AI model\u016f \u2014 to je smluvn\u00ed z\u00e1vazek, ne dobr\u00e1 v\u016fle. Cht\u011bjte to p\u00edsemn\u011b.<\/li>\n
  5. Auditn\u00ed stopa.<\/strong> Ka\u017ed\u00fd dotaz i ka\u017ed\u00e1 p\u0159ipraven\u00e1 akce mus\u00ed b\u00fdt dohledateln\u00e1: kdo se ptal, na co, kdy a co dostal. Bez logu nem\u00e1te jak dolo\u017eit, co se s daty d\u011blo \u2014 a audit v\u00e1s na to jednou zept\u00e1.<\/li>\n
  6. Lid\u00e9 a role.<\/strong> AI d\u011bd\u00ed probl\u00e9m, kter\u00fd zn\u00e1te z ERP: kdo sm\u00ed vid\u011bt mzdy a kdo mar\u017ee. P\u0159\u00edstup k AI asistentovi nava\u017ete na role \u2014 obchodn\u00edk se pt\u00e1 na sklad, ne na v\u00fdplaty.<\/li>\n
  7. GDPR a osobn\u00ed \u00fadaje.<\/strong> Z\u00e1kazn\u00edci v ERP jsou osobn\u00ed \u00fadaje. Plat\u00ed tot\u00e9\u017e co u ka\u017ed\u00e9ho zpracovatele: smlouva o zpracov\u00e1n\u00ed, \u00fa\u010del, minimalizace. AI vrstva na tom nic nem\u011bn\u00ed \u2014 jen to nesm\u00ed obej\u00edt.<\/li>\n<\/ol>\n

    Jak to \u0159e\u0161\u00edme v Symmy<\/h2>\n

    Na\u0161e MCP servery pro ERP<\/a> b\u011b\u017e\u00ed v datacentrech v EU a k va\u0161\u00ed datab\u00e1zi p\u0159istupuj\u00ed zabezpe\u010den\u00fdm p\u0159ipojen\u00edm s whitelistingem IP nebo p\u0159es VPN. V\u00fdchoz\u00ed re\u017eim je jen pro \u010dten\u00ed, agendy si vyb\u00edr\u00e1te p\u0159i z\u0159\u00edzen\u00ed a data se nepou\u017e\u00edvaj\u00ed k tr\u00e9nov\u00e1n\u00ed model\u016f. Ke ka\u017ed\u00e9mu dotazu vznik\u00e1 z\u00e1znam. Technick\u00e9 pozad\u00ed popisuje \u010dl\u00e1nek o MCP serverech<\/a>.<\/p>\n

    \n

    \u010cty\u0159i ot\u00e1zky na ka\u017ed\u00e9ho dodavatele AI<\/h2>\n

    1. Kde fyzicky b\u011b\u017e\u00ed slu\u017eba a kudy te\u010dou data?<\/strong> Cht\u011bjte konkr\u00e9tn\u00ed odpov\u011b\u010f \u2014 regi\u00f3n, zp\u016fsob p\u0159ipojen\u00ed. 2. M\u016f\u017eu omezit rozsah na vybran\u00e9 agendy a jen \u010dten\u00ed?<\/strong> 3. Tr\u00e9nujete na na\u0161ich datech modely?<\/strong> Jedin\u00e1 p\u0159ijateln\u00e1 odpov\u011b\u010f je ne, smluvn\u011b. 4. Uka\u017ete mi auditn\u00ed log.<\/strong> Ne slajd \u2014 skute\u010dn\u00fd z\u00e1znam dotaz\u016f. Kdo odpov\u00ed bez vyt\u00e1\u010dek, mysl\u00ed bezpe\u010dnost v\u00e1\u017en\u011b.<\/p>\n<\/div>\n

    Nej\u010dast\u011bj\u0161\u00ed obavy \u2014 a co je na nich pravda<\/h2>\n
    \n\u201eAI si na\u0161e \u010d\u00edsla zapamatuje a n\u011bkomu je \u0159ekne.\u201c<\/summary>\n

    Model si mezi konverzacemi nepamatuje va\u0161e data a netr\u00e9nuje se na nich \u2014 odpov\u011bdi vznikaj\u00ed dotazem do va\u0161\u00ed datab\u00e1ze v okam\u017eiku ot\u00e1zky. Co stoj\u00ed za pozornost, je p\u0159\u00edstup lid\u00ed: kdo se sm\u00ed pt\u00e1t, \u0159e\u0161te rolemi, ne z\u00e1kazem AI.<\/p>\n<\/details>\n

    \n\u201eNechceme otev\u00edrat datab\u00e1zi do internetu.\u201c<\/summary>\n

    Spr\u00e1vn\u011b \u2014 a taky se to tak ned\u011bl\u00e1. Spojen\u00ed vede p\u0159es whitelisting IP nebo VPN, tedy z jedn\u00e9 konkr\u00e9tn\u00ed ov\u011b\u0159en\u00e9 adresy, ne \u201ez internetu\u201c. Va\u0161e datab\u00e1ze zvenku viditeln\u00e1 nen\u00ed.<\/p>\n<\/details>\n

    \n\u201eCo kdy\u017e AI n\u011bco p\u0159ep\u00ed\u0161e v \u00fa\u010detnictv\u00ed?\u201c<\/summary>\n

    Ve v\u00fdchoz\u00edm nastaven\u00ed nem\u016f\u017ee \u2014 p\u0159\u00edstup je jen pro \u010dten\u00ed. Z\u00e1pisy se povoluj\u00ed a\u017e v\u011bdom\u011b, po agend\u00e1ch, a i pak jdou p\u0159es ofici\u00e1ln\u00ed rozhran\u00ed ERP se v\u0161emi validacemi. P\u0159ehled \u00farovn\u00ed popisuje \u010dl\u00e1nek o AI agentech<\/a>.<\/p>\n<\/details>\n

    \n\u201eJe to v\u016fbec leg\u00e1ln\u00ed v\u016f\u010di GDPR?\u201c<\/summary>\n

    Ano, p\u0159i dodr\u017een\u00ed b\u011b\u017en\u00fdch pravidel pro zpracovatele: smlouva o zpracov\u00e1n\u00ed, jasn\u00fd \u00fa\u010del, minimalizace rozsahu, EU lokalita. Je to stejn\u00e1 discipl\u00edna jako u hostingu ERP nebo e-shopu \u2014 ne nov\u00e1 pr\u00e1vn\u00ed kategorie.<\/p>\n<\/details>\n

    \nJak za\u010d\u00edt bezpe\u010dn\u011b?<\/summary>\n

    Pilot jen pro \u010dten\u00ed nad dv\u011bma t\u0159emi agendami, na p\u00e1r t\u00fddn\u016f. Uvid\u00edte re\u00e1ln\u00fd p\u0159\u00ednos i re\u00e1ln\u00e1 rizika d\u0159\u00edv, ne\u017e cokoli otev\u0159ete \u0161\u00ed\u0159eji. P\u0159ipojen\u00ed popisuj\u00ed n\u00e1vody pro Claude<\/a> a ChatGPT<\/a>; firm\u00e1m bez placen\u00e9ho AI \u00fa\u010dtu je ur\u010den p\u0159ipravovan\u00fd Symmy Assistant<\/a>.<\/p>\n<\/details>\n","protected":false},"excerpt":{"rendered":"

    Prvn\u00ed ot\u00e1zka ka\u017ed\u00e9ho \u0161\u00e9fa i \u00fa\u010detn\u00ed: \u201eA uvid\u00ed to cel\u00fd internet?\u201c Sedm v\u011bc\u00ed, kter\u00e9 rozhoduj\u00ed o bezpe\u010dn\u00e9m nasazen\u00ed AI nad \u00fa\u010detnictv\u00edm \u2014 a jak je m\u00e1 \u0159e\u0161it dodavatel.<\/p>\n","protected":false},"author":0,"featured_media":67139,"template":"","class_list":["post-67206","erpedie","type-erpedie","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/symmy.com\/cs\/wp-json\/wp\/v2\/erpedie\/67206","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/symmy.com\/cs\/wp-json\/wp\/v2\/erpedie"}],"about":[{"href":"https:\/\/symmy.com\/cs\/wp-json\/wp\/v2\/types\/erpedie"}],"version-history":[{"count":0,"href":"https:\/\/symmy.com\/cs\/wp-json\/wp\/v2\/erpedie\/67206\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/symmy.com\/cs\/wp-json\/wp\/v2\/media\/67139"}],"wp:attachment":[{"href":"https:\/\/symmy.com\/cs\/wp-json\/wp\/v2\/media?parent=67206"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}