ai-docs/docs/ai/governance.md

Governance, Privacy, and Policy

Allowed Data

• Public information or approved internal content.
• Code that is already in approved repos.

Handle With Care

• Customer data or identifiers.
• Security-sensitive configuration.
• Anything not explicitly approved by policy.

Forbidden Data

• Secrets, credentials, or personal data.
• Non-approved proprietary information.

Safe Prompt Examples

• "Summarize this public API and propose tests."
• "Refactor this function without changing behavior."

Redaction Tips

• Remove secrets before pasting.
• Replace real identifiers with placeholders.
• Use minimal context required for the task.

Compliance Expectations

• Follow org security policies and data handling rules.
• Use AI as assistance, not authority.

Ownership

If you are unsure about data classification, escalate before using AI.