Check an AI Tool's Privacy Settings Before Uploading Documents
Before uploading a document, decide whether the service is an appropriate place for its contents. Product features and data-handling settings can differ by plan and account type. Review the actual terms, controls and organisational rules instead of assuming every AI interface handles information in the same way.
Why it matters
A document can contain more sensitive information than its title suggests. Comments, tracked changes, metadata and embedded tables may reveal details that are unnecessary for the task you want the tool to perform.
A practical workflow
- Classify the information and confirm that you have permission to use the chosen service for this task.
- Read current guidance on retention, training use, account controls and who can access uploaded material.
- Remove unnecessary personal details and use a short excerpt or synthetic sample when that is sufficient.
- Check sharing, export and deletion controls, and keep the authoritative document in its approved storage location.
An example
To improve the wording of a policy paragraph, you may not need the full staff handbook with internal contacts and comments. A redacted excerpt can provide enough context while reducing the amount of information sent to the service.
A mistake to avoid
Do not assume a personal subscription has the same protections or controls as an organisation-managed account. Also avoid treating a setting label as the whole policy; read what the setting actually changes and what it does not cover.
Try it and check the result
Walk through one low-risk sample upload and inspect where the file appears, how it can be shared and how removal works. Resolve unclear controls before using the workflow with information that requires stronger protection.
Reference and further reading
NIST AI Risk Management Framework.
The workflows and examples in this guide are illustrative. Product controls and availability can change; check the linked official guidance for your setup.
Continue with Passkeys vs Passwords: What Changes When You Sign In? or explore all blog topics.