Using AI at Work

Real time saved, without leaking company data or losing your job over it

People have been fired for pasting the wrong thing into a chatbot. Not for using AI — for putting customer records, source code, or an unreleased document into a box that sent it to a company their employer has no contract with. At the same time, the person who quietly uses these tools well finishes the reporting, the drafting and the summarizing in a fraction of the time. Both of those are true at once, and the difference between them is a handful of rules that take five minutes to learn. This guide is for employees who want the speed without the risk, and for small business owners who need a policy and do not want to pay a consultant to write one.

Free PDF, about ten pages. No sign-up.

Call a licensed professional for these

Knowing where to stop is a skill, not a failure of nerve. These jobs are not DIY:

Before using AI on anything covered by HIPAA, FERPA, or attorney-client privilege, talk to your compliance officer or a lawyer. Health records, student records and legal files carry statutory penalties that fall on the organization and sometimes on you personally.
If you have already pasted customer or patient data into a public tool, tell your manager or IT team today. In several regimes that is a reportable incident with a legal clock running, and self-reporting early is treated very differently from being found out later.
For any contract, employment agreement, or policy that will bind people, a lawyer reviews it. AI is fine for a first draft you then pay someone less to check; it is not fine as the final word.
Before deploying AI that affects hiring, firing, pay, lending or housing decisions, get legal advice. Discrimination law applies to the outcome regardless of whether a machine produced it, and 'the software did it' is not a defense.
If your employer's policy is unclear, ask in writing and keep the reply. Verbal permission protects nobody.
For a business handling payment data, check your PCI obligations before connecting any AI tool to systems that touch card numbers.

What you need

Your company's approved tool

Many firms now provide one with a contract that keeps data out of training. Use that one, not your personal account.

The written policy

If your workplace has one, read it once properly. If it does not, this guide has a template you can hand to whoever should write it.

A redaction habit

Find-and-replace names and numbers with placeholders before pasting. Takes fifteen seconds.

A saved set of prompts

The wordings that work for your actual job. This is where the time saving compounds.

Part 1

The line that must not be crossed

Almost every serious incident is the same mistake: information that belonged to someone else went into a tool the employer had no agreement with. Learn this list as a list.

Customer or client names, contact details, account numbers, or anything identifying an individual.
Patient information of any kind. Even a de-identified case can be re-identified from small details.
Employee records: reviews, salaries, disciplinary notes, medical or immigration paperwork.
Source code, if your employer treats it as proprietary. Many do, and this is the classic incident.
Unreleased products, pricing strategy, financials before publication, or anything under NDA.
Login credentials, API keys, or connection strings. This happens constantly and is worse than it sounds.
Anything from a third party you signed a confidentiality agreement to protect.
Legal advice you received, which can waive privilege over the whole matter.

Safety

The test is simple: would you email this to a stranger at a company your employer has no contract with? A free chatbot is closer to that than most people picture.

Part 2

How to get the value anyway

The restrictions above rule out much less than people assume, because the highest-value uses do not require sensitive data at all.

1
Redact, then paste
Replace real names with Customer A, real figures with round placeholders, real addresses with a city. Get the draft back, then substitute the real details yourself. Nearly everything you actually wanted still works.
2
Describe rather than paste
'Write a firm but polite follow-up to a client who is sixty days late on a five-figure invoice, where we want to keep the relationship' needs no real data and gets you 90% of the way.
3
Use it on your own words
Your rough notes, your bullet points, your voice memo. That is your own material, and turning a mess into clear prose is the single biggest daily time saving available.
4
Use it to prepare, not to send
Rehearse a difficult conversation, anticipate objections in a proposal, generate questions before a meeting. No sensitive input, direct benefit.
5
Use it to understand
Paste a public regulation, standard, or manual and ask what it requires of you. Public documents carry no confidentiality problem.

Part 3

What it is genuinely good at, by job

Concrete rather than aspirational, from the kinds of work we see across DFW.

Office and admin: turning meeting notes into minutes with actions, drafting recurring correspondence, writing the awkward email.
Sales: first-draft proposals, follow-up sequences, rehearsing objections, summarizing a long RFP down to what it actually asks.
Trades and field work: writing up an estimate clearly, explaining to a customer why the repair costs what it does, standardizing job sheets.
Retail and food: rewriting menu or product descriptions, drafting policies, turning a supplier email into a plain summary.
Bookkeeping: explaining an unfamiliar term, drafting the chase letter, writing procedure notes so the work survives you being off.
Management: structuring a review from your own notes, planning an agenda, writing the first version of a process that has only ever lived in someone's head.
Anyone who writes: getting past a blank page. Editing something mediocre is dramatically easier than starting.

Safety

Check the output before it leaves your hands. Your name is on it, the tool's is not. Invented figures and confidently wrong details in a customer-facing document are your problem.

Part 4

Disclosure, and being straight about it

The question people worry about most, usually more than they need to.

1
Follow the written policy first
If one exists, it settles the matter. If it does not, ask in writing and keep the answer.
2
Nobody expects disclosure for shaping your own work
Using a tool to tidy your own email is like using spellcheck. Announcing it is not required and mostly reads as odd.
3
Say so where authorship is the point
Performance reviews you write about someone, condolences, references, anything where the value is that a person sat down and thought about it. Using AI silently there is a trust problem rather than a policy one.
4
Always disclose where accuracy is claimed
Research, analysis, legal or medical summaries, anything someone will rely on. Say what was AI-drafted and what you verified.
5
Never let it speak as you in a matter of judgment
Approvals, sign-offs, testimony, disciplinary decisions. If your judgment is the product, it must actually be your judgment.

Part 5

A policy for a small business

If you employ people and have no policy, you have a policy — it is 'everyone guesses'. This is a workable one you can adapt in an afternoon.

1
Name the approved tools
List which tools are allowed and for what. Provide at least one, because a blanket ban with no alternative gets ignored quietly, which is worse than a rule people follow.
2
Define the data that never goes in
Use the list above, edited for your business. Be concrete — 'sensitive information' means nothing, 'customer names, card numbers, and anything from a patient file' means something.
3
Require a human check on anything that leaves
Nothing AI-drafted reaches a customer, a regulator, or a public channel without a named person reading it. Put the responsibility on a role, not on 'the team'.
4
Say who decides the edge cases
One named person to ask. Ambiguity is what produces the bad decision, and staff should never feel that asking is a career risk.
5
State the amnesty explicitly
Anyone who realizes they pasted something they should not have must be able to say so immediately without being punished for the disclosure itself. You want to know in the first hour, and fear is what stops that.
6
Review it twice a year
The tools change quickly. Diary it, or the policy quietly becomes wrong and everyone knows it.

Safety

A policy nobody has read is worth nothing. Ten minutes in a team meeting, with the reasons rather than just the rules, is worth more than a document in a shared drive.

The words people use

Knowing the right word is half of getting good help.

Enterprise tool: A paid business version under contract, usually excluding your data from training.
Data leakage: Confidential information leaving the organization, often by being pasted somewhere.
Redaction: Removing identifying details before sharing, so the content stays useful and the identity does not.
Shadow AI: Staff using personal AI accounts for work, invisibly. Usually a sign the official option is missing or too awkward.
Privilege: Legal protection over lawyer-client communication. Can be waived by sharing, sometimes for the whole matter.
Acceptable use policy: The written rules for what tools may be used for what. What most small firms are missing.
Human in the loop: A named person who reviews output before it has consequences.

Do these this week

Reading changes nothing on its own.

Find out whether your employer has an AI policy. Read it, or establish in writing that there is not one.
Learn the never-paste list well enough to recall it without looking.
Practice redacting one real document down to a safe version.
Turn off training in any personal AI account you use for work.
Save the three prompts that work for your actual job.
If you run the business: write the one-page policy this month.
Tell your staff plainly that owning up to a mistake immediately is safe.
Diary a six-month review, because this changes faster than policies do.

Next guide

Getting Hired in the AI Age

Your résumé is read by software before a person sees it — here is how to get past it

Read it All Guides