What never to send to AI

Checklist · Checklists Free Checked: October 2026

A 30-second check before you hit send: what to remove, how to anonymize and what to do if it's already gone out.

What it is

The short version for everyday work: what never to paste into a chat, how to swap names and numbers so the task still makes sense, and what to do if something extra has already been sent. The full routine for accounts, access and AI agents is in the "Data security when working with AI" checklist. If you handle client data, the terms of your contract with them come before this list.

  • Privacy
  • Security
  • Beginner

Text to copy

Checklist
BEFORE YOU HIT SEND: 30 SECONDS
- [ ] No passwords, verification codes sent by text, access keys (API keys) or login details
- [ ] No card numbers, bank account numbers, Social Security numbers, driver's license or passport numbers, tax IDs or insurance policy numbers
- [ ] No medical information about specific people (in healthcare, patient data is protected by HIPAA)
- [ ] Names, phone numbers, addresses and emails of customers and coworkers are replaced
- [ ] No one else's trade secrets: contract terms under an NDA, a client's internal numbers
- [ ] The whole screenshot has been checked: nothing extra in the corners, browser tabs or notifications
- [ ] The file has no hidden sheets, comments or edit history that carry extra data

HOW TO SWAP: THE MEANING STAYS, THE DATA DOESN'T
- Mike Johnson → Client A
- Daisy Hardware LLC → Company B (retail, 20 employees)
- (614) 555-0123 → [phone]
- Street address → [address]; keep the city only if it matters for the task
- $1,237,500 → "about $1.2 million," if the exact amount isn't needed for the calculation
- A table of customers → only the columns you need, with no names or contact details

SETTINGS: ONCE
- [ ] In the service's privacy settings, you found the option about using your chats to train models and picked the one you want
- [ ] You know whether the service has a temporary chat that isn't saved to your history, and where to turn it on
- [ ] You upload client data only to a service and plan whose terms allow it (check your client's contract)

IF YOU'RE UNSURE
- [ ] Ask yourself: "Is it OK if a stranger reads this text?" If not, anonymize it or don't send it

IF SOMETHING EXTRA ALREADY WENT OUT
- [ ] A password or key: change it right away in the service where it's used. Deleting the chat doesn't guarantee the data disappears from the service immediately
- [ ] Delete the chat from your history
- [ ] If it's client data, tell the person in charge or the client, as your contract requires

Lessons that use it

Professions it helps

Showing 5 of 37

More in Checklists

Checked: October 2026