Open cardosec

Case A4EFBA · AI security · L1 Foundations

Staff Pasting Data into AI Tools

Practise as: Explain it · InterviewLevel: L1 Foundations

Interview questionEmployees are pasting company data into public AI chatbots. What are the risks and what would you do?

  1. 01 What is it?
  2. 02 How is it abused?
  3. 03 How do you stop it?
Practise this card As Interview
What a strong answer covers

Try it out loud first. Then check yourself:

  1. Data leaves your control: consumer tiers may keep prompts and use them to improve models, depending on the settings.
  2. Risks include leaking customer personal data, secrets in pasted code, and breaching contracts or privacy law.
  3. Banning AI tools tends to push use underground; give people an approved tool with business terms and no training on inputs.
  4. Back it with a clear policy on what data is allowed, training, and DLP or browser controls for the riskiest data.

If the interviewer pushes back

  • How would you find out which AI tools people already use, without treating everyone as a suspect?

Go deeper

More AI security cards

All AI security cards →

cardosec draws a security topic and gives you a clock: explain it out loud with no notes, then see what you covered and what you missed. Free during early access.

Reviewed 2026-10-09