What never to send to AI
A 30-second check before you hit send: what to remove, how to anonymize and what to do if it's already gone out.
What it is
The short version for everyday work: what never to paste into a chat, how to swap names and numbers so the task still makes sense, and what to do if something extra has already been sent. The full routine for accounts, access and AI agents is in the "Data security when working with AI" checklist. If you handle client data, the terms of your contract with them come before this list.
- Privacy
- Security
- Beginner
Text to copy
BEFORE YOU HIT SEND: 30 SECONDS
- [ ] No passwords, verification codes sent by text, access keys (API keys) or login details
- [ ] No card numbers, bank account numbers, Social Security numbers, driver's license or passport numbers, tax IDs or insurance policy numbers
- [ ] No medical information about specific people (in healthcare, patient data is protected by HIPAA)
- [ ] Names, phone numbers, addresses and emails of customers and coworkers are replaced
- [ ] No one else's trade secrets: contract terms under an NDA, a client's internal numbers
- [ ] The whole screenshot has been checked: nothing extra in the corners, browser tabs or notifications
- [ ] The file has no hidden sheets, comments or edit history that carry extra data
HOW TO SWAP: THE MEANING STAYS, THE DATA DOESN'T
- Mike Johnson → Client A
- Daisy Hardware LLC → Company B (retail, 20 employees)
- (614) 555-0123 → [phone]
- Street address → [address]; keep the city only if it matters for the task
- $1,237,500 → "about $1.2 million," if the exact amount isn't needed for the calculation
- A table of customers → only the columns you need, with no names or contact details
SETTINGS: ONCE
- [ ] In the service's privacy settings, you found the option about using your chats to train models and picked the one you want
- [ ] You know whether the service has a temporary chat that isn't saved to your history, and where to turn it on
- [ ] You upload client data only to a service and plan whose terms allow it (check your client's contract)
IF YOU'RE UNSURE
- [ ] Ask yourself: "Is it OK if a stranger reads this text?" If not, anonymize it or don't send it
IF SOMETHING EXTRA ALREADY WENT OUT
- [ ] A password or key: change it right away in the service where it's used. Deleting the chat doesn't guarantee the data disappears from the service immediately
- [ ] Delete the chat from your history
- [ ] If it's client data, tell the person in charge or the client, as your contract requiresLessons that use it
Professions it helps
- Project engineer
- HR generalist and recruiter
- Small business owner
- Executive assistant and office manager
- Data entry clerk
Showing 5 of 37
More in Checklists
- Before you launch a product · 27 items: payments, analytics, legal basics, support, launch day and a review one week later.
- Data security when working with AI · What not to paste into a chat, which settings to check and how to limit AI agents.
- Onboarding an employee or contractor · What to prepare before the first day, and what to do on day 1, week 1, month 1 and day 90.
Checked: October 2026