Give staff a rule they can use on a busy day: keep private information out, check the result, and ask before sending anything important.

• Customer, employee, payment, password, health, legal, or tax details pasted into a public AI tool.
• An AI answer copied into a customer message without a person checking it.
• A new paid tool bought before the business names the job it should help with.
• Nobody able to explain what information enters the tool or who approves the result.

• Pick one low-risk task, such as a first draft or a list of public questions.
• Write down what information must stay out of the tool.
• Name the person who checks the result before it reaches a customer.
• Keep, change, or stop after a small trial based on time saved and mistakes found.

We can map a safe, useful use for AI around the tools you already have. We do not hand customer promises or important business decisions to a machine.

Get a plain-English second opinion

Product features and rules can change. Use the linked source as the current word.

• CISA small and midsize business resources — Official steps for phishing, passwords, an extra sign-in check, updates, backups, and encryption.