# Spot the Shadow AI Risk

## Would you paste this into a public AI tool?

### Customer contract

**Risk:** Confidential clauses, customer names, and commercial terms.

### Source code

**Risk:** Intellectual property, credentials, and security vulnerabilities.

### Employee review

**Risk:** Personal data and sensitive HR information.

### Sales pipeline

**Risk:** Customer data, pricing, and strategic information.

## Pause before you prompt

- Is the tool approved?
- Is the account managed by [Company]?
- Does the prompt contain confidential or personal data?
- Can the task be completed with anonymised information?

Questions: [security contact]