Know your organisation's acceptable use policy

Most organisations that permit AI tool use have, or should have, a clear policy covering which tools are approved, what data can and can't be used, and which use cases require extra care or sign-off. If your organisation has one, read it, it's usually short and directly answers most of the questions that come up in daily use.

If you're not sure whether something is covered, or your organisation doesn't yet have a clear policy, ask before assuming. It's a much smaller conversation to have in advance than after confidential information has already been typed into the wrong tool.