Risk
What data can I upload to an AI tool?
The question isn't just whether AI responds well. Also important is what data you upload, who can see them and how you can delete or export them.
- Sensitive data
- Training
- Retention
- Permissions
Minimum Checklist
- Can content be used for training?
- Are there history controls or deletion?
- Where are the privacy options?
- What happens with attached files?
- Who reviews sensitive results?
For personal use
Do not upload ID cards, complete contracts, medical data, keys, payrolls or third-party information if you do not need to do so.
For small business
Define before what data can be uploaded, which tool is approved and who responds if there's an error. Comfort does not substitute a simple internal rule.
How to reduce risk?
Anonymize data when possible, remove unnecessary names, upload fragments instead of complete documents and separate technical queries from personal information. If you need the entire document, use an approved tool for that level of data.
Alert signal
If you can't find options for history, deletion, training or exportation, don't use that tool for sensitive information until it's clarified. Cheap may cost more if the data shouldn't have left your environment.