This is currently the area of charity technology receiving the worst advice, and it mostly arrives as enthusiasm about efficiency from people with something to sell. It deserves a more balanced answer than either the enthusiasm or the alarm.
The benefit is real. Organisations with no spare capacity gain the most from anything that removes administrative work, and drafting, summarising and first-pass reporting are genuinely quicker. A small team can reclaim hours a week, and in a charity those hours go straight back into delivery.
The obligations are also more serious than in a commercial setting. When the data concerns vulnerable people, a careless choice about which tool gets access is not a compliance irritation, it is a safeguarding matter, and the accountability sits with trustees personally.
A one-page policy covering what may be used, on what data, and who signs off is enough for most charities. It is a governance question, and it is answerable in an afternoon.