Strategic plans, technical data and financials are the most common uploads, with 24% also putting customer PII into public AI platforms.
Know What Your Team Is Sharing with AI
Employees are using ChatGPT, Claude, Copilot, and dozens of other AI tools every day. Do you know what data they’re putting in and what they’re getting out?
The AI Blind Spot Is Growing Every Day
Your employees are already using AI tools to write emails, summarise documents, generate code, and analyse data. Most of them aren't telling you. The question isn't whether AI is being used in your organisation. It's whether you know what data is going into it.
36%
of employees upload sensitive company data to AI tools
$4.63M
average cost of a shadow AI breach
$670K more than standard breaches. 1 in 5 organisations already affected
77%
of GenAI users paste data into AI tools
82% of that pasting happens from unmanaged personal accounts, and 22% of pastes contain PII or PCI data.
AI Is the Biggest Blind Spot in Your Organisation
Data Leakage
Employees paste source code, client data, financial models, and legal documents into AI chatbots. Once it’s in the prompt, it’s in the AI provider’s system.
Shadow AI
Your team is using AI tools you haven’t approved, on accounts you don’t control, with data you can’t track. Standard endpoint security tools don’t detect AI usage.
Compliance Risk
Regulated industries face increasing scrutiny over AI data handling. “We didn’t know” is not a defence when client data appears in AI prompts.
How ActivityPulse Detects AI Usage
Every interaction with AI tools is captured in real-time. Prompts are analysed for sentiment and classified for risk.
Complete AI Usage Visibility Across 33+ Services
From mainstream consumer tools to enterprise developer platforms to foreign-origin AI services that may pose national security risks.
Major Consumer AI
ChatGPT, Claude, Google Gemini, Microsoft Copilot, DeepSeek, Perplexity, Grok, Mistral, Meta AI
Popular Alternatives
Poe, HuggingChat, You.com, Phind, Pi, Character.AI, Writer, Jasper, Komo, Andi
Enterprise & Developer
GitHub Copilot, Amazon Q, Cohere Coral, Cursor, Windsurf, Replit AI
Chinese-Origin AI
Baidu ERNIE, Alibaba Qwen, ByteDance Doubao, Moonshot Kimi, Zhipu ChatGLM, MiniMax Hailuo
Russian-Origin AI
Sber GigaChat, Yandex GPT
Always Growing
New AI services can be added via server configuration. No agent update required.
Three Ways Data Flows to AI. All Captured.
Typed Prompts
When an employee types a question or instruction into an AI service, ActivityPulse captures the text. Detects submission via Enter key, typing timeout, or app switching.
Pasted Content
When an employee pastes text into an AI service, often source code, email content, or document text, it’s captured as a separate event. This is frequently the highest-risk data flow.
Copied Responses
When an employee copies text from an AI response, such as code snippets, generated content, or summaries, it’s captured. This tracks data flowing out of AI services back into your organisation.
AI File Upload/Download Detection
Beyond text prompts, employees are uploading/downloading entire files to AI services: spreadsheets, PDFs, codebases, and documents. ActivityPulse captures every file action with full metadata.
- File name, path, size, and method captured
- Detects drag-and-drop, file picker, and paste uploads
- Tracks which AI service received the file
- Integrates with DLP rules for automated alerts
AI Prompt Sentiment Intelligence
ActivityPulse analyses every captured prompt for sentiment. A purpose-built classifier detects patterns of work dissatisfaction, frustration, exit ideation, and burnout language.
Negative sentiment feeds directly into the Retention Risk engine, where it combines with other behavioural signals to surface employees at risk of resignation.
- Automated sentiment classification on every prompt
- Feeds into Retention Risk scoring automatically
- Sentiment badges visible in the activity table
Regulators Are Catching Up. Are You?
AI governance is no longer optional. Regulations are being enacted globally, and organisations that can’t demonstrate oversight face fines, sanctions, and reputational damage.
🇪🇺 EU AI Act (2024)
The world’s first comprehensive AI law. Requires organisations to maintain records of AI system usage, conduct risk assessments, and demonstrate transparency. Fines up to 7% of global revenue.
🇦🇺 Australia’s National AI Plan (2025)
Existing privacy and consumer laws apply to AI. The OAIC requires disclosure of automated decision-making by December 2026. A new AI Safety Institute (operational 2026) will assess risks. The Privacy Act reforms make AI data governance a board-level obligation.
🏢 ISO/IEC 42001 (2023)
The first international standard for AI management systems. Requires organisations to establish, implement, and continuously improve AI governance. Auditors will ask for evidence.
🔒 Industry Mandates
Finance (APRA CPS 230/234), healthcare (My Health Records Act), legal (professional conduct rules), and Australian government agencies (DTA AI Policy v2.0, effective December 2025) all require demonstrable AI data controls.
Automated Alerts When AI Policies Are Breached
Configure rules to alert instantly when AI usage crosses your boundaries:
- Prompt contains sensitive keywords (client names, project codes)
- File uploaded to any AI service
- AI usage detected outside approved services
- Prompt length exceeds threshold (bulk data paste)
- Negative sentiment detected in AI prompts
- Any usage of Chinese or Russian-origin AI services
Alerts delivered via email, Slack, or Microsoft Teams within seconds of the event. The pre-built rule library includes AI-specific scenarios.
Trace Every AI Interaction in Seconds
Tue 2:14 PM
Opened ChatGPT in Chrome
Opened ChatGPT in Chrome
Tue 2:15 PM
Pasted 847 lines of proprietary source code
Pasted 847 lines of proprietary source code
Tue 2:16 PM
Prompt: “refactor this to use async/await”
Prompt: “refactor this to use async/await”
Tue 2:18 PM
Copied AI-generated code response (312 lines)
Copied AI-generated code response (312 lines)
Tue 2:22 PM
Uploaded client-report-Q1-2026.xlsx to Claude
Uploaded client-report-Q1-2026.xlsx to Claude
Tue 2:23 PM
Prompt: “summarise the key findings in this report”
Prompt: “summarise the key findings in this report”
Tue 2:31 PM
Opened DeepSeek (unapproved, Chinese-origin AI)
Opened DeepSeek (unapproved, Chinese-origin AI)
Tue 2:32 PM
Pasted internal API credentials into prompt
Pasted internal API credentials into prompt
The Investigation Timeline traces every AI interaction in chronological order. Filter by service, prompt type, or sentiment. Export as branded PDF or DOCX for compliance records.
Build Your AI Policy with Data, Not Guesswork
Before you can govern AI, you need to understand how it’s being used. ActivityPulse answers every question your board, auditors, and regulators will ask.
Which AI services are employees using?
How frequently are they using them?
What type of data are they sharing?
Are they using approved tools or shadow AI?
Is sensitive data appearing in prompts?
Which departments are heaviest AI users?
Are files being uploaded to AI services?
Are employees using foreign-origin AI tools?
Take Control of AI in Your Organisation
See exactly what your team is sharing with AI tools. Build informed policies with real data. Demonstrate compliance to regulators and auditors.
Workforce Intelligence.
The Pulse of Your Organisation.
About Us
A product of Network 1 Media Group Pty Ltd
ABN 82 633 114 753
Ph: +61 2 6188 9610