Restricted inputs
Unapproved tools must not receive customer files, personnel records, unreleased results, acquisition materials, source code, credentials, regulated information or communications seeking legal advice. Removing a name is insufficient where the surrounding facts identify a person or transaction. Screen captures, pasted tables and uploaded decks are inputs too.
Forbidden delegation
Do not instruct an AI service to choose who to hire, dismiss, promote, pay, approve for credit, investigate or report to authorities. It may assist an approved preparatory task; a person with the actual authority must examine evidence and make the decision. “The model recommended it” is not a decision record.
Invented evidence
No generated case citation, market share, regulatory requirement, safety assurance or customer endorsement may be presented as fact without verification against the original source. The word source beneath a convincing footnote does not create the source. Do not manufacture testimonials or put generated statements into the mouths of officers.
External-facing work
Public web copy, social posts, proposal language, press releases, investor material and presentations to customers require the relevant human approvals even when AI writes only one sentence. An otherwise approved prompt does not authorize publication.
