Decide which business data can go to a commercial AI and which must stay on a model you control: sort your client, transaction and financial data by sensitivity and route each kind of task accordingly: AI agent prompt

Help me write a simple AI data policy for my business. Business: [e.g. real estate team / brokerage / accounting practice / agency], size: [people], AI tools we use or want to use: [e.g. ChatGPT, Claude, Gemini, Copilot, an AI built into our CRM, a local or self-hosted model]. Data we hold: [list: client contact details, ID documents, bank details, contracts and transaction files, commissions and company financials, MLS or market data, marketing content, internal messages]. 1) Sort each data type into three levels: Public (fine for any AI tool), Internal (only AI tools on a business plan with training turned off and a signed data agreement), and Restricted (never pasted into a commercial chatbot; only a tool we control or none). Explain each choice in one line. 2) For our 10 most common AI tasks [list, or suggest typical ones for my business], say which level of data each needs and which tool should do it, and how to do the task with less sensitive data, for example by removing names or using totals. 3) List the settings to check in each tool: data retention, training opt-out, who on the team has access, connectors and what they can read. 4) Write a one-page policy in plain language for the team, with five do's and five don'ts, and a short checklist for adding any new AI tool. 5) Suggest a phased rollout: who tries it first, what we watch for, and when everyone gets it. Mark anything that depends on local privacy law for me to confirm.