Green
Nothing it recognised as sensitive. Still give it a read, then go ahead.
Free tool
Hide the details. Keep the answer.
I tested three free redaction tools on one Aussie email. Not one of them hid the bank details. So I built one that knows what an ABN is. Paste your text in, it hides your client’s details, you ask your AI, then it puts the real details back. It runs on your device, so nothing you paste here gets sent anywhere.
The tool
Hide it. Ask it. Put it back.
Works with ChatGPT, Claude, Copilot or whatever your team uses. Press “Try an example” to see it on a made-up email first.
This tool needs a newer browser. Try opening this page in Safari or Chrome.
What it hid
Untick anything you’re happy for the AI to see.
Always hide these
Choose what to hide
Runs on your device. Nothing you paste here is sent anywhere.
How the lights work
Green, amber, red.
Every time you press Hide you get a light. They match the one-page rules below.
Amber
Client details found and hidden. Check what it hid, then copy.
Red
Passwords, codes, tax file, Medicare or bank details. Your rules say these don’t go into AI at all, even hidden. Think twice.
The one-page rules
Print it. Pin it up.
The rules the lights come from. Fill in your tools and who to ask, then put it where your team will see it.
AI at [your company]: the one-page rules
AI is allowed here. These rules keep our clients’ information safe. Not sure? Ask [name] before you paste.
1. Use our tools, on your work login
| Tool | Use it for |
|---|---|
| [e.g. ChatGPT Team, Claude Team, Copilot] | [writing, summarising, checking] |
No personal or free accounts for work. On a personal account the chat history belongs to you, not the business. It may be used to train the AI, and it leaves when you do.
2. Check the light before you paste
Green: go ahead. Nothing that identifies a client, a person or a site. Rewording a general email, explaining a standard, writing a job ad, summarising a public article.
Amber: take the details out first. Swap client names, addresses, phone numbers, emails and dollar amounts for “Client A”, “Site 1”, “$X”. Quotes, meeting notes, client emails, schedules. The answer is just as good, and the tool above does the swapping for you.
Red: never, even with the names taken out. Passwords and logins. Gate codes, alarm details and site security. Staff records: tax file numbers, bank details, medical, licences. Any document a client or a contract marks confidential.
3. Read what comes back
AI gets things wrong and sounds sure about it. You are responsible for what you send, not the AI.
4. Three more
- Don’t share links to AI chats. Shared links can end up public.
- Don’t connect AI to email, files or calendars without [name]’s OK. Once it’s connected, it sees everything you can.
- Don’t let an AI note-taker join a call without telling everyone on it.
Template from Jack Willmott AI, jackwillmottai.com/redact. A starting point, not legal advice.
Straight up
What it can’t do.
- It can miss things it doesn’t recognise. A name it’s never seen, a lowercase address, a number written an unusual way. It looks for patterns, not meaning. Put your clients in “Always hide these”, and read the result before you paste.
- Text only, for now. Not Word or PDF files. Copy the text out first.
- It’s a safety net, not legal advice. You’re still the last check.
The rest of it
Want it set up for your team?
The tool’s free. Getting a whole team using AI safely takes a bit more: the right accounts, the rules filled in for how you work, your client list loaded in, and everyone shown how it works.
Most teams are already using AI. The question is whether they’re doing it in a way you’d be happy for your clients to see.
That’s what I do. I’ll sit down with you, set it up around your business and take your staff through it.
If that sounds useful, get in touch and we’ll book a call.