Company accounts. MFA. Clean exits.
The simplest security wins in AI are the same as everywhere else: who owns the account, how it's protected, and what happens when someone leaves.
Set it up right
On Day One
- Business accounts owned by the company
- Single sign-on where the tool supports it
- Multi-factor authentication switched on
- Access by role, not by request
Close it down right
On The Last Day
- AI accounts on the offboarding checklist
- Shared chats and links revoked
- API keys and connectors removed
- Chat history kept or deleted by policy
Own the account, own the data.