[ Use AI Securely ]

[ Chapter 5 · Practical guidelines for safe AI use ]

Prompting without leaking

3 min read

Most tasks that tempt you to paste sensitive data do not actually need it. The model needs the structure of your problem, rarely the identifying details. Redacting is a skill, and it takes seconds once practiced.

The three techniques

1. Placeholders

Replace identifying details with neutral tokens before pasting, and restore them afterwards. "Draft a payment reminder to [CLIENT], invoice [NUMBER], amount [AMOUNT], 30 days overdue." The model writes exactly as good a letter, and the identifying details stayed home. One caution: redaction reduces risk, it does not eliminate it. Reread what remains for indirect identifiers (a job title plus a city can identify a person) and for confidential detail that survived the redaction.

2. Abstraction

Describe the situation one level up. Instead of pasting the angry email from a named customer, write: "A long-standing customer is angry about a delayed delivery and threatens to leave. Draft a de-escalating reply offering a gesture." You typed five seconds longer and shared almost nothing.

3. Synthetic examples

When you need help with a format or a formula, recreate the problem with fake data: a spreadsheet issue with invented numbers, a code bug reproduced in a toy snippet. The answer transfers; the real data stays home.

Two smaller habits complete the picture. Check your AI tools' settings once: many offer a toggle to exclude your conversations from training, and turning history off where offered reduces what is retained. And treat chat history as a data store: a year of pasted work fragments is itself a leak waiting for an account compromise.