A newer category of risk.
WHAT TO UNDERSTAND
Information you put into a tool leaves your control.
WHAT NOT TO PUT INTO ANY AI TOOL
Customer personal data Credentials Financial records Confidential commercial information Anything you are contractually obliged to protect
WHY
You may not know where it is stored, how long, or who can access it.
WHAT TO ESTABLISH BEFORE USING ONE
What the provider does with what you submit Whether it is used for training Whether business terms differ from consumer ones
WHAT TO TELL STAFF
Specifically what may not be submitted.
A general instruction to be careful is insufficient.
WHAT ELSE TO CONSIDER
Output accuracy. Verify anything consequential.
WHAT NOT TO DO
Paste a customer list, a contract, or a database export into a tool to summarise it.
WHAT TO PUT IN PLACE
A short written policy naming what is permitted.
WHAT TO REVIEW
Which tools are actually in use across your team.
Usually more than you expect.
