Before you paste anything into an AI tool, look for three kinds of thing and swap them out. Your company's AI policy will tell you which tools you can use and what for.
Personal details about customers or staff
Anything under contract or marked confidential
Passwords and logins
A van driver's notes on a minor collision need turning into a clear report for the insurer. The notes include the driver's name and phone number, the customer's delivery address, and the PIN for the van's fuel card. What do you paste into the tool?
The notes with the driver and customer swapped for placeholders and the PIN taken out. The real details go back in your final version.
The notes as they are. An insurance report has to be exact, so the tool needs everything.
The notes without the PIN. The names are fine, because the report stays inside the company.
All three things are in there. Swap the driver and the customer for placeholders, take the PIN out, paste the rest, and put the real details back in your final version yourself. The report needs what happened, and the tool can write that up from placeholders just as well. Taking out only the PIN still sends personal details about a colleague and a customer, and 'internal' doesn't change what you've pasted.

