Induction slides

Editable.

Four slides, as a PowerPoint file. Download it, apply your own template, put your logo where your logo goes.

Unbranded on purpose — there is no logo slot to fill in and no placeholder frame to delete. Your deck already has a look; this is the words.

Download the deck

Real text in real placeholders, 16:9, set in Arial so it renders the same on every machine. Open it, hit Reset or apply your theme, and it takes your house style.

4 slides · PPTX · 33 KB Download
1. The rule — if you wouldn't post it publicly, don't paste it
2. Never paste — the five categories
3. Do this instead — redact, use the approved tool, ask
4. Already pasted something? — tell [TEAM] today

It opens in PowerPoint, Google Slides and Keynote. [TEAM], [ORGANISATION] and [CUSTOMER] are left in deliberately — an unfilled placeholder is a visible prompt, where a plausible-looking default is a thing that ships wrong.

No branding system, and that's the feature. A logo uploader here would be worse at applying your brand than the template you already have, and it would need a paragraph explaining where your logo went. Take the file, restyle it in four seconds, done.

Or take the words

If you'd rather paste the content into a deck, a PDF or a doc you've already built, here it is — one block per slide.

Slide 1 — the rule
IF YOU WOULDN'T POST IT ON OUR PUBLIC WEBSITE,
DON'T PASTE IT INTO A PUBLIC AI TOOL.

- It leaves the company the moment you press send.
- There is no unsend.
- This applies to your personal account too.
Slide 2 — the five categories
NEVER PASTE

1. Customer and employee data — names, emails, IDs, account numbers
2. Credentials and keys — passwords, API keys, tokens, connection strings
3. Source code and internal documents — proprietary code, roadmaps, decks
4. Contracts and financials — agreements, pricing, unreleased numbers
5. Health and legal records — anything regulated or privileged

Source code is the one with real exceptions. Ask rather than assume.
Slide 3 — what to do instead
DO THIS INSTEAD

1. Redact first. The AI helps just as well with [CUSTOMER] as with
   the real name. Ask about the pattern, not the person.
2. Use the approved tool. If we provide one with data protections,
   use that one — not your personal account.
3. Not sure? That's the signal. Ask [TEAM].

Check any text before you send it: dontpastethat.com/check-a-paste
Test yourself in five minutes: dontpastethat.com/paste-test
Slide 4 — already pasted something?
ALREADY PASTED SOMETHING?
TELL [TEAM] TODAY. THAT'S THE RIGHT CALL, NOT A DISCIPLINARY MATTER.

- Reporting it promptly is the correct action.
- If it was a key or token, rotate it now and treat it as disclosed.
- Delay is what turns a small problem into a notifiable one.

The clocks that matter run from discovery, not from the mistake.

Delivering it

Four slides is not an accident. It is roughly what an induction gives this topic before attention goes, and the shape that survives being borrowed by someone who wasn't in the room when it was written.

Slide 1 is the only one people will remember, so deliver it as a sentence rather than reading the bullets. Slide 2 is a reference — say it exists, don't narrate all five. Slide 3 is the one that changes behaviour, because it is the only one that says what to do rather than what to stop. Slide 4 is the one that changes what happens after a mistake, and it is the slide most decks leave out.

Do not end on the prohibition. A session that closes on "don't" teaches people to route around the tool rather than around the risk — which usually means doing the same thing on a phone, where you can't see it.

If you want pictures

The share images work as full-bleed slide backgrounds, and they're editable SVG — open one in any text editor and change the wording to your own. There's a square set for channels, a wide one for link cards, and a profile badge.

They're rasterised to PNG in your own browser when you download them, so nothing about what you take is recorded.

The licensing bit

Everything in this kit is released under CC0 — public domain. No attribution, commercial use fine, and rewriting it in your own voice is encouraged rather than merely tolerated. Deliberately not CC BY: an attribution requirement nobody can satisfy inside an internal policy document would make ordinary use technically infringing, and this exists to be used.

One ask, not a rule: leave a link to dontpastethat.com somewhere in it. It is the only thing that turns a paragraph someone skimmed into a page they can actually read when they need it.