{"id":67939,"date":"2026-08-12T09:00:00","date_gmt":"2026-08-12T07:00:00","guid":{"rendered":"https:\/\/symmy.com\/erpedie\/bezpecnost-ai-nad-firemnimi-daty-2\/"},"modified":"2026-08-12T09:00:00","modified_gmt":"2026-08-12T07:00:00","slug":"bezpecnost-ai-nad-firemnimi-daty","status":"publish","type":"erpedie","link":"https:\/\/symmy.com\/sk\/erpedie\/bezpecnost-ai-nad-firemnimi-daty\/","title":{"rendered":"Bezpe\u010dnos\u0165 AI nad firemn\u00fdmi d\u00e1tami: \u010do si postr\u00e1\u017ei\u0165, ne\u017e ju pust\u00edte k ERP"},"content":{"rendered":"

Ke\u010f prv\u00fdkr\u00e1t navrhnete pripoji\u0165 AI k \u00fa\u010dtovn\u00edctvu, pr\u00edde v\u017edy rovnak\u00e1 ot\u00e1zka: \u201eA neuvid\u00ed na\u0161e \u010d\u00edsla cel\u00fd internet?\u201c<\/em> Je to spr\u00e1vna ot\u00e1zka \u2014 a m\u00e1 konkr\u00e9tne, overite\u013en\u00e9 odpovede. Tento \u010dl\u00e1nok je checklist: sedem vec\u00ed, ktor\u00e9 rozhoduj\u00fa o tom, \u010di je AI nad firemn\u00fdmi d\u00e1tami bezpe\u010dn\u00e1, a presn\u00e9 ot\u00e1zky, ktor\u00e9 polo\u017ei\u0165 ka\u017ed\u00e9mu dod\u00e1vate\u013eovi.<\/p>\n

Kr\u00e1tka odpove\u010f<\/h2>\n
\n

Bezpe\u010dn\u00e9 nasadenie AI nad ERP stoj\u00ed na \u0161tyroch pilieroch: d\u00e1ta zost\u00e1vaj\u00fa vo va\u0161ej datab\u00e1ze<\/strong> (AI sa p\u00fdta, nekop\u00edruje), pr\u00edstup je len na \u010d\u00edtanie a len k vybran\u00fdm agend\u00e1m<\/strong>, spojenie je zabezpe\u010den\u00e9<\/strong> (whitelisting IP alebo VPN, servery v E\u00da) a ka\u017ed\u00e1 ot\u00e1zka sa loguje<\/strong>. Na va\u0161ich d\u00e1tach sa netr\u00e9nuj\u00fa modely. Kto z t\u00fdchto \u0161tyroch bodov nespln\u00ed ktor\u00fdko\u013evek, nem\u00e1 nad \u00fa\u010dtovn\u00edctvom \u010do robi\u0165.<\/p>\n<\/div>\n

Sedem vec\u00ed, ktor\u00e9 si postr\u00e1\u017ei\u0165<\/h2>\n
    \n
  1. Kde d\u00e1ta fyzicky s\u00fa.<\/strong> Va\u0161a datab\u00e1za zost\u00e1va tam, kde je \u2014 v ERP. AI vrstva do nej posiela ot\u00e1zky a dost\u00e1va odpovede; nevznik\u00e1 \u017eiadna druh\u00e1 k\u00f3pia \u00fa\u010dtovn\u00edctva \u201eniekde v cloude\u201c. P\u00fdtajte sa: kop\u00edrujete na\u0161e d\u00e1ta, alebo sa do nich dopytujete?<\/em><\/li>\n
  2. Kto smie \u010do \u010d\u00edta\u0165.<\/strong> Rozsah ur\u010dujete vy: ktor\u00e9 agendy AI uvid\u00ed (napr\u00edklad poh\u013ead\u00e1vky a sklad \u00e1no, mzdy nie) a \u010di smie len \u010d\u00edta\u0165, alebo aj pripravova\u0165 z\u00e1pisy. Za\u010d\u00edna sa v re\u017eime len na \u010d\u00edtanie.<\/li>\n
  3. Ako vyzer\u00e1 spojenie.<\/strong> \u0160ifrovan\u00fd prenos je samozrejmos\u0165; rozdiel rob\u00ed whitelisting IP adries alebo VPN<\/strong> \u2014 k datab\u00e1ze sa nedostane nikto in\u00fd ne\u017e overen\u00e1 slu\u017eba. Servery v E\u00da rie\u0161ia aj pr\u00e1vnu str\u00e1nku.<\/li>\n
  4. Tr\u00e9nuj\u00fa sa na tom modely?<\/strong> Spr\u00e1vna odpove\u010f je nie. Va\u0161e ot\u00e1zky a d\u00e1ta sa nepou\u017e\u00edvaj\u00fa na tr\u00e9novanie AI modelov \u2014 to je zmluvn\u00fd z\u00e1v\u00e4zok, nie dobr\u00e1 v\u00f4\u013ea. Chcite to p\u00edsomne.<\/li>\n
  5. Auditn\u00e1 stopa.<\/strong> Ka\u017ed\u00e1 ot\u00e1zka aj ka\u017ed\u00e1 pripraven\u00e1 akcia mus\u00ed by\u0165 doh\u013eadate\u013en\u00e1: kto sa p\u00fdtal, na \u010do, kedy a \u010do dostal. Bez logu nem\u00e1te ako dolo\u017ei\u0165, \u010do sa s d\u00e1tami dialo \u2014 a audit sa v\u00e1s na to raz op\u00fdta.<\/li>\n
  6. \u013dudia a roly.<\/strong> AI ded\u00ed probl\u00e9m, ktor\u00fd pozn\u00e1te z ERP: kto smie vidie\u0165 mzdy a kto mar\u017ee. Pr\u00edstup k AI asistentovi navia\u017ete na roly \u2014 obchodn\u00edk sa p\u00fdta na sklad, nie na v\u00fdplaty.<\/li>\n
  7. GDPR a osobn\u00e9 \u00fadaje.<\/strong> Z\u00e1kazn\u00edci v ERP s\u00fa osobn\u00e9 \u00fadaje. Plat\u00ed to ist\u00e9 \u010do pri ka\u017edom sprostredkovate\u013eovi: zmluva o sprac\u00favan\u00ed, \u00fa\u010del, minimaliz\u00e1cia. AI vrstva na tom ni\u010d nemen\u00ed \u2014 len to nesmie ob\u00eds\u0165.<\/li>\n<\/ol>\n

    Ako to rie\u0161ime v Symmy<\/h2>\n

    Na\u0161e MCP servery pre ERP<\/a> be\u017eia v d\u00e1tov\u00fdch centr\u00e1ch v E\u00da a k va\u0161ej datab\u00e1ze pristupuj\u00fa zabezpe\u010den\u00fdm pripojen\u00edm s whitelistingom IP alebo cez VPN. V\u00fdchodiskov\u00fd re\u017eim je len na \u010d\u00edtanie, agendy si vyber\u00e1te pri zriaden\u00ed a d\u00e1ta sa nepou\u017e\u00edvaj\u00fa na tr\u00e9novanie modelov. Ku ka\u017edej ot\u00e1zke vznik\u00e1 z\u00e1znam. Technick\u00e9 pozadie popisuje \u010dl\u00e1nok o MCP serveroch<\/a>.<\/p>\n

    \n

    \u0160tyri ot\u00e1zky na ka\u017ed\u00e9ho dod\u00e1vate\u013ea AI<\/h2>\n

    1. Kde fyzicky be\u017e\u00ed slu\u017eba a kadia\u013e te\u010d\u00fa d\u00e1ta?<\/strong> Chcite konkr\u00e9tnu odpove\u010f \u2014 regi\u00f3n, sp\u00f4sob pripojenia. 2. M\u00f4\u017eem obmedzi\u0165 rozsah na vybran\u00e9 agendy a len \u010d\u00edtanie?<\/strong> 3. Tr\u00e9nujete na na\u0161ich d\u00e1tach modely?<\/strong> Jedin\u00e1 prijate\u013en\u00e1 odpove\u010f je nie, zmluvne. 4. Uk\u00e1\u017ete mi auditn\u00fd log.<\/strong> Nie slajd \u2014 skuto\u010dn\u00fd z\u00e1znam ot\u00e1zok. Kto odpovie bez vyt\u00e1\u010dok, mysl\u00ed bezpe\u010dnos\u0165 v\u00e1\u017ene.<\/p>\n<\/div>\n

    Naj\u010dastej\u0161ie obavy \u2014 a \u010do je na nich pravda<\/h2>\n
    \n\u201eAI si na\u0161e \u010d\u00edsla zapam\u00e4t\u00e1 a niekomu ich povie.\u201c<\/summary>\n

    Model si medzi konverz\u00e1ciami nepam\u00e4t\u00e1 va\u0161e d\u00e1ta a netr\u00e9nuje sa na nich \u2014 odpovede vznikaj\u00fa dopytom do va\u0161ej datab\u00e1zy v okamihu ot\u00e1zky. \u010co stoj\u00ed za pozornos\u0165, je pr\u00edstup \u013eud\u00ed: kto sa smie p\u00fdta\u0165, rie\u0161te rolami, nie z\u00e1kazom AI.<\/p>\n<\/details>\n

    \n\u201eNechceme otv\u00e1ra\u0165 datab\u00e1zu do internetu.\u201c<\/summary>\n

    Spr\u00e1vne \u2014 a tak sa to ani nerob\u00ed. Spojenie vedie cez whitelisting IP alebo VPN, teda z jednej konkr\u00e9tnej overenej adresy, nie \u201ez internetu\u201c. Va\u0161a datab\u00e1za zvonku vidite\u013en\u00e1 nie je.<\/p>\n<\/details>\n

    \n\u201e\u010co ke\u010f AI nie\u010do prep\u00ed\u0161e v \u00fa\u010dtovn\u00edctve?\u201c<\/summary>\n

    Vo v\u00fdchodiskovom nastaven\u00ed nem\u00f4\u017ee \u2014 pr\u00edstup je len na \u010d\u00edtanie. Z\u00e1pisy sa povo\u013euj\u00fa a\u017e vedome, po agend\u00e1ch, a aj potom id\u00fa cez ofici\u00e1lne rozhranie ERP so v\u0161etk\u00fdmi valid\u00e1ciami. Preh\u013ead \u00farovn\u00ed popisuje \u010dl\u00e1nok o AI agentoch<\/a>.<\/p>\n<\/details>\n

    \n\u201eJe to v\u00f4bec leg\u00e1lne vo\u010di GDPR?\u201c<\/summary>\n

    \u00c1no, pri dodr\u017ean\u00ed be\u017en\u00fdch pravidiel pre sprostredkovate\u013eov: zmluva o sprac\u00favan\u00ed, jasn\u00fd \u00fa\u010del, minimaliz\u00e1cia rozsahu, E\u00da lokalita. Je to rovnak\u00e1 discipl\u00edna ako pri hostingu ERP alebo e-shopu \u2014 nie nov\u00e1 pr\u00e1vna kateg\u00f3ria.<\/p>\n<\/details>\n

    \nAko za\u010da\u0165 bezpe\u010dne?<\/summary>\n

    Pilot len na \u010d\u00edtanie nad dvomi tromi agendami, na p\u00e1r t\u00fd\u017ed\u0148ov. Uvid\u00edte re\u00e1lny pr\u00ednos aj re\u00e1lne rizik\u00e1 sk\u00f4r, ne\u017e \u010doko\u013evek otvor\u00edte \u0161ir\u0161ie. Pripojenie popisuj\u00fa n\u00e1vody pre Claude<\/a> a ChatGPT<\/a>; firm\u00e1m bez platen\u00e9ho AI \u00fa\u010dtu je ur\u010den\u00fd pripravovan\u00fd Symmy Assistant<\/a>.<\/p>\n<\/details>\n","protected":false},"excerpt":{"rendered":"

    Prv\u00e1 ot\u00e1zka ka\u017ed\u00e9ho \u0161\u00e9fa aj \u00fa\u010dtovn\u00ed\u010dky: \u201eA uvid\u00ed to cel\u00fd internet?\u201c Sedem vec\u00ed, ktor\u00e9 rozhoduj\u00fa o bezpe\u010dnom nasaden\u00ed AI nad \u00fa\u010dtovn\u00edctvom \u2014 a ako ich m\u00e1 rie\u0161i\u0165 dod\u00e1vate\u013e.<\/p>\n","protected":false},"author":0,"featured_media":67139,"template":"","class_list":["post-67939","erpedie","type-erpedie","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/symmy.com\/sk\/wp-json\/wp\/v2\/erpedie\/67939","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/symmy.com\/sk\/wp-json\/wp\/v2\/erpedie"}],"about":[{"href":"https:\/\/symmy.com\/sk\/wp-json\/wp\/v2\/types\/erpedie"}],"version-history":[{"count":0,"href":"https:\/\/symmy.com\/sk\/wp-json\/wp\/v2\/erpedie\/67939\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/symmy.com\/sk\/wp-json\/wp\/v2\/media\/67139"}],"wp:attachment":[{"href":"https:\/\/symmy.com\/sk\/wp-json\/wp\/v2\/media?parent=67939"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}