Financial reports, source code, and strategy documents shared with public AI platforms
Know What Your Team Is Sharing with AI
Employees are using ChatGPT, Claude, Copilot, and dozens of other AI tools every day. Do you know what data they’re putting in and what they’re getting out?
The AI Blind Spot Is Growing Every Day
Your employees are already using AI tools to write emails, summarise documents, generate code, and analyse data. Most of them aren't telling you. The question isn't whether AI is being used in your organisation. It's whether you know what data is going into it.
36%
of Australian workers upload sensitive data to AI
$4.63M
average cost of a shadow AI breach
$670K more than standard breaches. 1 in 5 organisations already affected
77%
of employees leak data via AI tools
Over 50% of paste events into AI tools contain corporate information
AI Is the Biggest Blind Spot in Your Organisation
Data Leakage
Employees paste source code, client data, financial models, and legal documents into AI chatbots. Once it’s in the prompt, it’s in the AI provider’s system.
Shadow AI
Your team is using AI tools you haven’t approved, on accounts you don’t control, with data you can’t track. Standard endpoint monitoring tools don’t detect AI usage.
Compliance Risk
Regulated industries face increasing scrutiny over AI data handling. “We didn’t know” is not a defence when client data appears in AI prompts.
“The NSW Reconstruction Authority confirmed a major data breach affecting 3,000 flood victims after a contractor uploaded sensitive personal and health information to ChatGPT.”
“Samsung banned ChatGPT after engineers leaked proprietary source code through AI prompts in three separate incidents within 20 days.”
“81% of employees who use free AI tools admit to sharing confidential company information, often through public versions of ChatGPT, Copilot, or Gemini.”
“Only 30% of Australians believe the benefits of AI outweigh its risks. 78% expressed concern about negative outcomes from AI systems.”
How ActivityPulse Monitors AI Usage
Every interaction with AI tools is captured in real-time. Prompts are analysed for sentiment and classified for risk.
Complete AI Usage Visibility Across 33+ Services
From mainstream consumer tools to enterprise developer platforms to foreign-origin AI services that may pose national security risks.
Major Consumer AI
ChatGPT, Claude, Google Gemini, Microsoft Copilot, DeepSeek, Perplexity, Grok, Mistral, Meta AI
Popular Alternatives
Poe, HuggingChat, You.com, Phind, Pi, Character.AI, Writer, Jasper, Komo, Andi
Enterprise & Developer
GitHub Copilot, Amazon Q, Cohere Coral, Cursor, Windsurf, Replit AI
Chinese-Origin AI
Baidu ERNIE, Alibaba Qwen, ByteDance Doubao, Moonshot Kimi, Zhipu ChatGLM, MiniMax Hailuo
Russian-Origin AI
Sber GigaChat, Yandex GPT
Always Growing
New AI services can be added via server configuration. No agent update required.
Three Ways Data Flows to AI. All Captured.
Typed Prompts
When an employee types a question or instruction into an AI service, ActivityPulse captures the text. Detects submission via Enter key, typing timeout, or app switching.
Pasted Content
When an employee pastes text into an AI service, often source code, email content, or document text, it’s captured as a separate event. This is frequently the highest-risk data flow.
Copied Responses
When an employee copies text from an AI response, such as code snippets, generated content, or summaries, it’s captured. This tracks data flowing out of AI services back into your organisation.
AI File Upload/Download Detection
Beyond text prompts, employees are uploading/downloading entire files to AI services: spreadsheets, PDFs, codebases, and documents. ActivityPulse captures every file action with full metadata.
- File name, path, size, and method captured
- Detects drag-and-drop, file picker, and paste uploads
- Tracks which AI service received the file
- Integrates with DLP rules for automated alerts
AI Prompt Sentiment Intelligence
ActivityPulse analyses every captured prompt for sentiment. A purpose-built classifier detects patterns of work dissatisfaction, frustration, exit ideation, and burnout language.
Negative sentiment feeds directly into the Retention Risk engine, where it combines with other behavioural signals to surface employees at risk of resignation.
- Automated sentiment classification on every prompt
- Feeds into Retention Risk scoring automatically
- Sentiment badges visible in the activity table
Regulators Are Catching Up. Are You?
AI governance is no longer optional. Regulations are being enacted globally, and organisations that can’t demonstrate oversight face fines, sanctions, and reputational damage.
🇪🇺 EU AI Act (2024)
The world’s first comprehensive AI law. Requires organisations to maintain records of AI system usage, conduct risk assessments, and demonstrate transparency. Fines up to 7% of global revenue.
🇦🇺 Australia’s National AI Plan (2025)
Existing privacy and consumer laws apply to AI. The OAIC requires disclosure of automated decision-making by December 2026. A new AI Safety Institute (operational 2026) will assess risks. The Privacy Act reforms make AI data governance a board-level obligation.
🏢 ISO/IEC 42001 (2023)
The first international standard for AI management systems. Requires organisations to establish, implement, and continuously improve AI governance. Auditors will ask for evidence.
🔒 Industry Mandates
Finance (APRA CPS 230/234), healthcare (My Health Records Act), legal (professional conduct rules), and Australian government agencies (DTA AI Policy v2.0, effective December 2025) all require demonstrable AI data controls.
Automated Alerts When AI Policies Are Breached
Configure rules to alert instantly when AI usage crosses your boundaries:
- Prompt contains sensitive keywords (client names, project codes)
- File uploaded to any AI service
- AI usage detected outside approved services
- Prompt length exceeds threshold (bulk data paste)
- Negative sentiment detected in AI prompts
- Any usage of Chinese or Russian-origin AI services
Alerts delivered via email, Slack, or Microsoft Teams within seconds of the event. 41 pre-built rule templates include AI-specific scenarios.
Trace Every AI Interaction in Seconds
Opened ChatGPT in Chrome
Pasted 847 lines of proprietary source code
Prompt: “refactor this to use async/await”
Copied AI-generated code response (312 lines)
Uploaded client-report-Q1-2026.xlsx to Claude
Prompt: “summarise the key findings in this report”
Opened DeepSeek (unapproved, Chinese-origin AI)
Pasted internal API credentials into prompt
The Investigation Timeline traces every AI interaction in chronological order. Filter by service, prompt type, or sentiment. Export as branded PDF or DOCX for compliance records.
Build Your AI Policy with Data, Not Guesswork
Before you can govern AI, you need to understand how it’s being used. ActivityPulse answers every question your board, auditors, and regulators will ask.
Which AI services are employees using?
How frequently are they using them?
What type of data are they sharing?
Are they using approved tools or shadow AI?
Is sensitive data appearing in prompts?
Which departments are heaviest AI users?
Are files being uploaded to AI services?
Are employees using foreign-origin AI tools?
“
“Shadow AI is the new shadow IT, but with far higher stakes. When employees paste client data into ChatGPT, the data leaves your control instantly. You can’t enforce a policy you can’t see being broken.”
AI Gone Wild: Why Shadow AI Is Your Worst Nightmare, March 2025
Take Control of AI in Your Organisation
See exactly what your team is sharing with AI tools. Build informed policies with real data. Demonstrate compliance to regulators and auditors.
Workforce Intelligence.
The Pulse of Your Organisation.
About Us
A product of Network 1 Media Group Pty Ltd
ABN 82 633 114 753
Ph: 02 6188 9610