Passwords and credentials
Do not enter passwords, API secrets, access tokens, PINs, recovery codes, or private authentication information.
Safer AI use
Do not put sensitive information into an AI tool unless you are authorized and the tool is approved for it.
A useful default is simple: if information could harm a person, customer, employee, or business if exposed, stop and check the rules before entering it.
Financial information
Avoid card numbers, bank credentials, tax identifiers, and other sensitive financial data unless an approved workflow specifically requires it.
Health and highly sensitive personal data
Do not paste medical records, diagnosis information, government identifiers, or similarly sensitive data into unapproved tools.
Customer and employee records
Follow your organization’s policy before sharing names, contact information, HR information, support histories, or private customer records.
Confidential business information
Protect contracts, unreleased plans, proprietary information, internal financials, and information covered by confidentiality obligations.
Anything you do not need
Even when a tool is approved, use the minimum amount of information needed to complete the task.
When you are unsure
Check your employer’s policy, the tool’s data settings, and any legal or contractual obligations that apply. For regulated or high-risk information, get qualified guidance rather than guessing.