Using AI tools without exposing company data
Use generative AI responsibly while protecting confidential, personal and client information.
Why this matters
Prompts, uploads and outputs may be stored or processed outside approved systems. Treat AI tools like any external service and follow company rules before sharing information.
By the end of this lesson
- Recognise the main warning signs
- Choose a safe verification method
- Know when and how to report the situation
What to notice
- Tool is not approved by the organisation
- Prompt contains client or employee data
- Source code includes secrets or credentials
- Uploaded document is confidential
- Output is accepted without verification
- AI-generated link or citation is assumed accurate
What to do
- Use only approved AI services
- Remove or anonymise sensitive information
- Never paste credentials or secret keys
- Verify outputs and sources
- Respect copyright and confidentiality
- Report accidental sensitive disclosure
Frequently asked questions
Can I paste confidential text into a public AI tool?
Not unless explicitly approved and appropriately protected.
Are AI answers always accurate?
No. Verify important facts and outputs.
What should never be included?
Passwords, tokens, secrets and unnecessary personal data.
Angvlar Security Awareness