Quick check
Guess first, no penalty. A payment webhook keeps failing. The log has a customer's email, the last four card digits and your live API secret. What do you paste into the AI tool?
A prompt is the message you send to the AI, including anything you paste into it. Whatever you paste may leave your company's systems. So before you paste, check for three things:
- Secrets: API keys, passwords, tokens, connection strings. If one was pasted by mistake, rotate it, the same as if it were committed to git.
- Personal data: customer names, emails, addresses, payment details, anything that identifies a person.
- Anything your company restricts: some companies limit which code or data may go into which tools. Follow your company's list of approved tools and rules. They decide this, not the AI tool's marketing page.
Swap real values for fake ones that keep the shape: a fake email still looks like an email, so the bug still shows. Most debugging needs the structure, not the real data.