Pick your version
Churches and nonprofits
Covers giving records, pastoral counseling, children's ministry data, prayer requests, background checks, and the gift-card scams that target church staff.
Businesses
Covers customer and employee data, credentials, financials, source code, legal matters, regulated data, and business email compromise.
Copy gives you only the part that goes into the AI tool. Download gives you that plus the administrator checklist and editing guide. The .md file opens in Notepad, TextEdit, Word, or any text editor.
Paste it into your AI tool
Do this once per tool your organization uses. Where a tool offers an organization-wide or team-wide setting, use that instead of asking each person to paste it themselves.
For one person
- Click your profile picture, then Customize ChatGPT.
- Paste the instructions into the box labeled for how ChatGPT should respond. If it will not fit, use a Project instead (next section).
- Save.
For a team (recommended)
- Create a Project and name it something like "Work Assistant."
- Open the Project's Instructions and paste the full text.
- Have staff start their chats inside that Project.
Admin setting
In Workspace settings, turn off "Improve the model for everyone" and disable public chat sharing. Team and Enterprise plans do not train on your data by default. Free and Plus accounts do.
For one person
- Create a Project.
- Open Project instructions and paste the text.
- Start your chats inside that Project.
For a team (recommended)
- An owner opens Settings, then the organization section.
- Paste the text into the organization-wide instructions field. It applies to every member automatically.
Admin setting
Team and Enterprise plans do not train on your conversations. Review the sharing and retention settings under the organization section.
For one person
- In Microsoft 365 Copilot, open Notebook (or a new Copilot Page).
- Paste the text at the top and keep working in that Notebook.
For a team (recommended)
- In Copilot Studio or the agent builder, create an agent for your organization.
- Paste the text into the agent's Instructions field.
- Publish the agent to Teams and point staff to it.
Admin setting
Copilot inherits your Microsoft 365 permissions. If staff can already open a file, Copilot can read it. Review sharing permissions on finance, HR, and donor folders before rolling Copilot out.
For one person or a team
- Open Gemini and choose Gems (or Gem manager).
- Create a new Gem and paste the text into Instructions.
- Share the Gem with your organization and have staff use it.
Admin setting
In the Google Workspace Admin console, confirm Gemini is enabled only for approved users and that Gemini activity is not used to improve Google's models.
Test it
Paste this into a new chat after setup:
The AI should decline and ask you to remove the names and amounts. If it summarizes the list, the instructions did not take. Re-check that you pasted into the instructions field, not into the chat.
Edit it for your organization
The file is plain text. Open it, change what you need, and re-paste. The downloaded file includes a short editing guide at the bottom. Common edits:
| You want to | Do this |
|---|---|
| Add a type of data specific to your work | Add a bullet under Section 1. Name the data, not the software it lives in. |
| Allow something we restricted | Move the bullet from Section 1 to Section 2 and write the condition (for example, "only with names replaced by initials"). |
| Name who to call if data leaks | In Section 5, replace the generic wording with a real name and phone number. |
| Add a rule | Add a bold sentence to Section 4 that starts with the behavior you want. |
Leave three things alone: the rule about embedded instructions in pasted content, the rule against impersonating leaders, and the credentials bullet. Those three block the most common ways AI tools get abused.
After any edit, re-paste into every tool, save a dated copy, and tell your staff what changed.
The part the AI cannot do for you
The instructions control what the AI accepts. They do not control account settings. Someone with admin rights needs to confirm these, and the downloaded file has the full checklist:
- 1Business or team plan, not personal accounts
- 2Training on your data turned off
- 3Multi-factor authentication required for everyone
- 4Public chat sharing disabled
- 5Connectors to email, files, giving or CRM systems off until approved in writing
- 6Access removed the day someone leaves
Not sure whether your settings are right?
Or whether staff are using tools you have not approved? Vital Integrators will check for you. Start with a free security assessment.
Get your free assessment →