Risk
Redact before you paste: a five-minute routine for privileged material
2026-10-16
Short answer
Before pasting anything into AI, run a five-minute routine: identify the three data tiers (public, confidential, privileged); replace names, addresses and identifiers with consistent placeholders; keep the mapping in the matter file, not the prompt; and record the AI use on the file. Privileged material should only ever reach a private or local model. The routine is short enough to actually follow, which is the point.
The five minutes
- Tier the material.
- Swap identifiers for placeholders.
- Keep the mapping off the prompt.
- Choose the right tool for the tier.
- Log the use on the matter file.
Placeholders, not deletions
Replace, do not delete — 'Claimant A', 'the 2024 agreement'. Deletion destroys meaning and invites the model to guess. Consistent placeholders keep the document readable and the identities out.
The tier rule
Public: any approved tool. Confidential: training off. Privileged: private or local only.