Only approved AI on company computers, and AI that can operate a computer gets its own isolated machine.
What it means
- AI in a browser or app whatever you type or upload goes to the provider, so the account and the terms matter most.
- AI connected to your email, files and apps it usually sees whatever the signed in person can see, so anything shared too widely becomes easy to find.
- AI installed on a computer that can click, type and open files it can do anything that computer can, with everything on it.
A simple example
An AI that can click, type and open files runs on its own virtual machine. It can reach only the files and tools it has been given for the job, and nothing else on the network.
Do it yourself
- Use application control so only approved software, AI tools included, can run on company computers.
- Keep AI that can operate a computer on a separate, isolated machine with its own limited accounts, no saved passwords, and only the files the job needs.
- Don’t run it on an everyday work laptop.
How to check
List what the AI could reach if it went wrong: files, saved passwords, accounts it’s signed in to, and other computers on the network. Remove anything on that list the job doesn’t need.
What that misses
People install these tools on work laptops to try them out. Unless something blocks or reports the install, nobody finds out.
What we do for you
On company computers, app control means an AI tool can’t run until it’s approved, and we can set up an isolated machine for the ones you do approve.
“What we do for you” describes work we do for our clients, and what’s included depends on your plan. Already a client? Your engineer can tell you what your plan covers.
Back to all rulesGet the full guide
Technology, managed by people.
The real McCoy: real oversight, real understanding, real answers. Start with a free AI Check.