# Before you paste anything in: [organisation]

Depending on the tool and your account settings, what you type may be kept by the provider or used to train its models. Treat anything you paste as if someone outside your organisation could read it.

## Two questions before anything goes in

- Does it name or describe a real person?
- Is it confidential to [the organisation] or a client?

If the answer to either is yes, leave it out, or take the details out first. Swap names for roles: [“the client”, “Supplier 2”, “the account manager”].

## An office or business

- Company confidential material
- Client and customer personal information
- Commercial-in-confidence material: contracts, pricing, tenders
- Staff records and anyone’s health details
- Logins, passwords and anything that opens a system
- [Anything else that’s off limits here]

## A law firm

- Anything covered by legal professional privilege
- Client confidential information
- Matter details that identify a client or another party
- Logins, passwords and anything that opens a system
- [Anything else that’s off limits here]

## A school

- Anything that identifies a student: names, photos, reports, work samples with names on them
- Staff personal details
- Confidential school matters
- Logins, passwords and anything that opens a system
- Students under a tool’s minimum age
- [Anything else that’s off limits here]

## Not sure?

Ask [name] before you paste. If our policy restricts or bans a tool, that beats this list.

*General guidance from C4Site. It isn’t legal advice. Where your organisation’s own policy says something different, follow your policy.*

---

From C4Site, c4site.com.au. Free to use, change and share under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); please keep this credit.