Clear Path step · Business · Your industry's rules and risks
Keep CUI out of AI tools that aren't authorized for it
Why it matters: Pasting CUI into a commercial AI tool can be a spill under your contract. The AI rule must say this explicitly.
On your path if you picked “Government contractor” for “What's your industry?”.
Do it
- Add CUI and export-controlled data to the red list in your AI rule.
- Check whether any AI features inside your CUI environment meet the same requirements.
- Disable AI features that don't.
- Train staff on what counts as CUI.
Check it worked: Your AI rule says CUI and export-controlled data never go into commercial AI tools, and any AI tool used inside the CUI boundary meets the same cloud requirements.
Simply put
Pasting CUI into a commercial AI tool is like photocopying a controlled document on a public copier: it can count as a spill. Saying so plainly in your AI rule keeps it from happening by accident.
In detail
Contractors may also see federal notices that use the term 'Super Intelligence' under Executive Order 14434; it refers to what we call AI.
Points toward the Long View: any AI tool inside your boundary meeting the same rules as everything else.