How to redact before you use AI at work

Direct answer: Redacting before you use AI at work means you minimize, mask, or keep sensitive data offline so customer names, secrets, and regulated details never enter the prompt.

What this means at work

Chat tabs close. Logs often do not. A fast paste of a ticket dump can outlive the session. Treat the prompt like an email to a vendor you do not fully control.

Build a short never-paste list: passwords, keys, PHI, full ticket bodies, unreleased pricing. Keep it short enough to remember when you are late.

Do this next

1. Write five never-paste items on a sticky note near your monitor.
2. Before each prompt, replace real names and IDs with roles or placeholders.
3. Ask whether the question still works with redactions. If not, use an approved tool or stay offline.
4. Say the three paste checks from Verify before you paste out loud, then send.

FAQ

What about internal ticket dumps?

Summarize the problem in your words. Do not paste the whole thread unless the tool is approved for that data class.

Is masking enough?

Masking helps. Minimizing is better. Offline is correct when the cost of a leak is high.

See also

• Pulse: Verify before you paste
• Challenge: Privacy is a habit
• Field Guide: Privacy and judgment