Design confidentiality in the age of AI tools

A board strategy memo and a moodboard travel through the same inbox, get opened in the same tools, and only one of them is treated as if it matters. That is not carelessness. It is a category error, and it is the whole subject.

When a company hands over a deck or a brand document for a redesign, the file usually carries more commercially sensitive material than anyone stops to name: positioning, projections, unreleased product direction, client data baked into a report template. The design brief is the surface. The business substance rides underneath it, and it goes wherever the file goes. Which files carry the most risk, and how to strip them, is its own checklist — we set that out separately. This is about the process handling them.

A tool is a party to the work

Enterprise tiers have improved: processing agreements, training opt-outs, regional residency. But design work rarely happens on an enterprise agreement. It happens on a personal plan, in a small team, with a contractor, across an agency — under terms written for general use rather than for someone's funding round. Whoever sends the file owns those terms whether or not they read them. The useful mental correction is simple: a tool that processes your uploads is not neutral software. It is a party to the work, and it deserves the scrutiny any other party would get.

What confidentiality looks like when it is real

Not a clause. A default. In practice it comes down to four commitments, and they are worth asking any partner to say out loud before the first file moves.

• Client material stays inside the team — not forwarded, not pasted into open tools.
• Nothing passes through an external service without the client knowing it will.
• An NDA is offered at the start, not negotiated after something has already been shared.
• The work is treated as commercially sensitive from the first file to final delivery.

Legal, financial and management consulting have operated this way for decades. Design is only being asked to make it explicit now, because the tools finally made the gap visible. Studios treating confidentiality as part of the craft are not being cautious — they are catching up to a norm every other professional service already holds.

Three questions before the next project

Does the team's process actually say how this material will be handled? Would your client, board or investor need to know where it ends up? Would you be comfortable if the contents surfaced somewhere you did not choose? If the answers are not clean, the material belongs inside a defined relationship with people who understand what the file represents — not in whichever tool was open at the time.