How do we stop employees pasting company data into ChatGPT?
Start with a policy people can follow: which AI tools are approved, for which data, and through which company account. Then make the approved tool easy to use, because people go around rules that block their work, and a business account with an AI provider usually gives you contractual terms on data use, admin controls and logs that a personal account does not. Explain the reason with concrete examples: customer lists, contracts, source code, salary data and anything under a non-disclosure agreement stay out of unapproved tools. Technical controls follow: data-loss prevention on endpoints or in the browser, a web proxy, and the AI provider's own admin settings. Check the result every month rather than once. NetSenX gives visibility, not blocking: from the Pro plan it shows which hosts talk to which AI services and how much data goes there, so you can see whether the policy works. It does not see what was typed or uploaded.