Security and compliance
How do I stop employees putting sensitive information into public AI tools?
Set a clear rule for what information may and may not be entered into public AI services, provide an approved alternative for business use, and restrict access where possible. Training should use real examples such as customer data, credentials, contracts, source code, and internal financial information.
What to check
- Which data types are prohibited in public AI tools?
- Is there an approved business AI option?
- Can use of unapproved tools be limited or monitored?