AI Enablement playbook/Module 5 · Shadow AI & security

Day 46 / 100 · Shadow AI & security · Guardrails in practice

Catch it before it's sent.

Policy tells people what not to paste. Guardrails catch the moment someone forgets, right at the point of use.

Detect

Spot The Pattern

Scan prompts for ID numbers, card numbers, emails and other sensitive patterns.

Warn or block

Stop The Slip

Warn for amber data, block for red. Tell the user why, so they learn.

Log

Learn From It

Record what was caught, not the data itself, to spot patterns and training gaps.

Guardrails catch slips. Policy prevents them.