What to check after uploading a document containing potentially sensitive information to an AI service.
Short answer
Identify the sensitive information inside the document, review the service's privacy and retention controls, and immediately rotate any credentials or secrets contained in the file.
Check the document for passwords, API keys, financial information, identity documents, private correspondence, or confidential work material.
If the document contained credentials or secrets, rotate or revoke them rather than relying on deletion alone.
Review the AI service's available history, deletion, privacy, and data controls.
For organisational information, follow your organisation's requirements for handling confidential material.
Check it now
A quick privacy check before putting information into an AI tool.
Open the checkSomething already happened?
If your personal information has been exposed, work out exactly what information was shared, secure affected accounts, watch for suspicious activity and avoid giving the same information to anyone who contacts you unexpectedly.
If you entered your password on a suspicious website, treat that password as compromised. Go directly to the real service, change it, turn on MFA, and check recent account activity.
Keep exploring