Mortgage brokers warned against entering client data into AI tools

Mortgage brokers should avoid emailing sensitive documents or reusing passwords, enable multi-factor authentication, and think twice before entering client data into consumer AI tools, Mortgage Brain has cautioned.

The warning comes as Mortgage Brain achieves ISO 27001 accreditation, the global benchmark for managing information security and cyber risk. It requires organisations to embed security across their people, processes, and technology, and to be independently audited to ensure data remains confidential, accurate, and available when needed.

As brokers handle increasing volumes of sensitive personal and financial information, risks such as phishing, ransomware, human error, and third-party exposure continue to grow. As a result, Mortgage Brain says data security is a must for any company handling sensitive client data, especially brokers, mortgage lenders and technology providers.

Top data security tips for brokers include:

• Use multi-factor authentication (MFA) whenever possible.
• Never reuse passwords across systems.
• Don’t email sensitive documents.
• Don’t paste client data into consumer AI tools.
• If you wouldn’t want it public, don’t put it into AI.

Cloë Atkinson, chief operating officer of Mortgage Brain, commented: “ISO 27001 accreditation shows that we are serious about data. With cases of cyber security on the rise, protecting data is business critical. Brokers can trust that Mortgage Brain is doing everything possible to handle their data, and that of their clients, as safely as possible, and we have been independently audited against best-in-class security standards to prove it. 

"But this isn’t enough. Brokers also need to make data security non-negotiable. Just a few simple steps, such as using AI tools with common sense and not reusing passwords, can make a big difference.”