I Deleted 5 Things From This File Before ChatGPT Saw It. It Still Found The Problem.
The video addresses the critical challenge of using powerful AI models on highly sensitive internal documents without violating data privacy. The speaker argues that traditional advice ('don't upload') is insufficient because useful work requires context. A proposed solution involves a workflow—demonstrated by the tool Airlock—that strips unnecessary Personally Identifiable Information (PII) and confidential details, then rebuilds a clean, sanitized copy of the file. This ensures the model receives only the minimum necessary context required to complete a specific task, keeping the original sensitive data local.
Key takeaways
-
AI requires minimal, targeted context
Instead of uploading entire files, define the job first and determine the absolute minimum information needed for the AI to perform the task. The model needs an operating plan, not PII like home addresses or API keys.
-
Redaction is insufficient; rebuilding is necessary
6:43
Simply blacking out sensitive data (redacting) can leave behind metadata and structural issues in file containers (like Word comments/track changes). The safer approach is to rebuild the approved material into a separate, clean document.
-
Define protected terms for context
2:05
Tools must allow users to define 'protected terms' (e.g., internal product codes) that are confidential but may not look like standard PII, giving the AI necessary contextual understanding.