Privacy / Vault rules

Steps

1. 1

   Step 1: Store organisation and personal credentials in Vault, not in chat history or AI Pulse prompts.
2. 2

   Step 2: Reveal or copy a secret only in Vault when a portal or product UI needs it.
3. 3

   Step 3: Never paste API keys, DSC PINs, bank passwords, or OTP codes into AI Pulse.
4. 4

   Step 4: Ask AI Pulse how a workflow works or what to check — not to hold or transmit secrets.
5. 5

   Step 5: If a secret may have been exposed, rotate it in Vault and review Shared Access / Audit Logs.

flowchart TD
  A[Need a credential?] --> B[Open Vault]
  B --> C[Reveal / copy when required]
  C --> D[Use in portal or product UI]
  D --> E[Do not paste into AI Pulse]
  E --> F[Ask AI Pulse about process — not passwords]