[YOUR COMPANY]: what can go into AI? (data cheat sheet)
From the free Stepthrough starter kit "AI Governance for Small Business" (https://learn.ynteractive.com/content/explainers/ai-governance-for-small-business). Adjust the examples to your work. This is not legal advice; client contracts and professional rules come first.

Ask one question before you paste: which level is this?

LEVEL 1: PUBLIC. Fine to use in any approved AI tool.
Examples: text on our website, published prices and service lists, press releases, public job posts, general questions with no client details.

LEVEL 2: INTERNAL. Approved tools on the company account only.
Examples: draft emails and memos, meeting notes with client names removed, internal process notes and SOPs, anonymized figures ("a client owes $4,200"), marketing plans.
Rule: remove names, addresses and account numbers first. Use placeholders such as [CLIENT], [ADDRESS], [AMOUNT].

LEVEL 3: CONFIDENTIAL. Never goes into AI as is.
Examples: passwords and logins; bank, card and account numbers; Social Security, tax ID and passport numbers; health and medical details; employee HR, pay and performance records; signed contracts and client files a client asked us to protect; anything covered by an NDA; legal advice from our lawyers.
Rule: keep it out. If you truly need AI help, swap every identifying detail for a placeholder, or ask [NAME] first.

When you are not sure, treat it as Confidential and ask [NAME].
Pasted something by mistake? Tell [NAME] the same day. No blame for reporting.

Quick test: "Would I be fine if this text showed up in a stranger's chat?"
Yes = Public. Only with names removed = Internal. No = Confidential.