I do that by referencing the other company policy that says I am not to stick customer information into ai systems, and the customers policy of external contractors are not to export their data outside the EU. as I only work with customer systems my hands are tied both ways.