Before You Paste It Into AI

1. What am I about to share?

• Passwords, API keys, authentication tokens, or recovery codes
• Customer or patient information; regulated or highly sensitive personal data
• Confidential contracts, legal material, internal financials, or unreleased strategy
• Proprietary source code, security findings, architecture details, logs, or incident data
• Employee records or other restricted internal information

2. Is this tool approved for this data?

Approval should cover the specific tool, account/workspace, use case, and data type. A consumer account and an enterprise-managed account may have different controls and terms.

3. Can I reduce the data?

Remove names, identifiers, secrets, unnecessary records, and full datasets. Use synthetic or redacted examples when possible.

4. Would I be comfortable with this leaving the company boundary?

If the answer is no, stop until the organization has confirmed the service, configuration, contractual protections, retention behavior, and permitted use.

Choose the right path

• GO — Public or intentionally published information.
• CHECK FIRST — Internal material where policy, contract, configuration, or data classification matters.
• STOP — Credentials, restricted data, regulated data, confidential client information, or other content your organization prohibits from external services.