Skip to content

Never put this in a prompt

Status: drafted · Time: 3 min · Audience: everyone Outcome: Use a one-page safety card to decide what must be redacted before prompting.

Printable card · Companion to §0.11 — The safety brief. Keep the shape. Strip the identity.


Never pasteExamplesSafer pattern
Customer PIInames, emails, phone numbers, account IDs, transaction IDs, addresses, PAN/Aadhaar fragmentsReplace with placeholders: customer@example.com, merchant_id=XXX, [TYPICAL RANGE].
Credentials, tokens, keysAPI keys, OAuth tokens, .env values, database passwords, certificatesUse <REDACTED>. Re-run the approved setup flow instead of inspecting secrets in chat.
Money-moving detailspayment API changes, balance logic, transfer rules, transaction-specific debuggingUse AI for shape and checklist. Keep real identifiers in approved systems. Require senior review.
Internal confidential datastrategy docs, financials, hiring/performance docs, legal drafts, incident detailsAsk whether the surface is approved. Summarise abstractly until classification is clear.

Before you paste, ask:

  1. Could this identify a customer, merchant, employee, partner, or transaction?
  2. Could this grant access to a system?
  3. Could this move money or change who can access money?
  4. Would I be uncomfortable seeing this prompt forwarded?

If any answer is yes, redact first or ask in the approved support channel.


Instead ofPrompt with
merchant_id=ZAR123456merchant_id=XXX
ravi@example.comcustomer@example.com
pay_X9Y2A4B7C8payment_id=PAYMENT_ID
amount=₹4,500 for Acme Corpamount in a typical range for a merchant payment
sk_live_...<REDACTED_API_KEY>

The AI usually needs the pattern, not the real value.


Approved connectors can read within their permission scope. That is different from copying connector-read data somewhere else.

Use data in place. Do not exfiltrate it.


Do not hide it. Stop, copy the prompt link or session reference if available, and alert the security or program support channel with the minimum necessary detail. Credentials should be rotated. Sensitive data exposure should be treated as an incident until the right owner says otherwise.


Remember: strip the identity, keep the shape.

Up to: ↑ Appendix H · Companion: §0.11 The safety brief