Never paste this into an AI tool
Not into a chat, a browser extension, a meeting bot or an app that “uses AI”. If it's on this list, it stays out.
Customer personal data
Names with addresses, emails, phone numbers, account histories, Social Security numbers.
Why It's their information, not yours, and privacy law and your promises to them cover it.
Instead Replace it with placeholders: “Customer A”, “the Portland client”.
Card and bank numbers
Card numbers, security codes, bank account and routing numbers.
Why One leak is fraud, and the card rules you agreed to forbid storing them like this.
Instead Leave them out. AI never needs the real number to help.
Passwords and keys
Passwords, API keys, access tokens, sign-in and recovery codes.
Why What you paste can be stored, logged or shown back later.
Instead Write [PASSWORD] or [API KEY]. If you've pasted a real one, change it.
Health records
Diagnoses, treatment, insurance details, anything a patient told a provider.
Why Health privacy rules apply, and most AI tools aren't set up for them.
Instead Remove everything that identifies the person, or use a tool approved for health data.
Anything under NDA or contract
Client files, partner terms, anything marked confidential.
Why You promised not to share it, and pasting it into an outside tool is sharing it.
Instead Describe the problem in general terms, or use a tool the contract allows.
Employee records
Pay, reviews, disciplinary notes, medical leave.
Why It's personal, it's sensitive, and employment law often covers it.
Instead Strip names and details, or keep it to a tool HR has approved.
Unreleased financials
Results before they're public, deal terms, forecasts, pricing plans.
Why An early leak can break agreements and trading rules, and hurt the business.
Instead Wait until it's public, or use an approved business tool.
Regulated data, like CUI
Controlled Unclassified Information, export-controlled technical data.
Why The rules say exactly where it may be stored and processed, and ordinary AI tools aren't on the list.
Instead Only in a system your organisation has approved for it. If you're not sure, don't.
Do this instead
- Remove it. Most jobs don't need the real names or numbers.
- Replace it with a placeholder, like “Customer A” or “Invoice 123”, and put the real details back yourself.
- Use an approved tool: one your employer or client has said yes to for this kind of information, signed in with the right account.
Not sure? Ask before you paste, not after. Or run it through “Is this safe to paste?” in the Library.
ai.donnaruma.us/library/never-paste, general information, not legal advice