A practical UK guide to connecting AI to business tools safely: scoped access, OAuth over passwords, prompt injection, and UK GDPR basics for small firms.