BII Containment
– Stop AI Data Leaks

Your team is already using AI. The question is what they’ve uploaded to it – and whether anyone decided that was okay.

The condition is BII Runoff – confidential business information leaking into AI tools outside your control. The service is BII Containment – how we find it, stop it, and keep it from starting again.

The Data Leak That’s Actually Happening

In every business we’ve audited, employees are using five or more AI tools – mostly free versions with no enterprise data protections – and uploading real confidential information to them: e.g. financial statements for comparison and forecasting, A/P invoices to recapture CAM charges, tenant and vendor records for renewal and lease analyses.

Nobody decided this should happen. It happened because the tools are fast, free, and one tab away. Either way, information that belongs inside your business has already left it.

We call this BII Runoff – the uncontrolled leakage of Business Identifiable Information into AI tools outside your organization’s control.

What BII Means

Business Identifiable Information is the term federal agencies (Commerce, the Census Bureau) use for confidential commercial and financial data protected under FOIA Exemption 4 – the business equivalent of PII. If the federal government treats this category as worth shielding, it’s worth asking why or if it’s being allowed to train a public AI model right now.

BII Containment: What We Do

BII Containment works as an audit first, then ongoing management:

  • BII Runoff Audit — a full inventory of every AI tool in use, who’s using it, and what’s been shared with it
  • Exposure assessment — whether those tools retain, train on, or otherwise keep access to what’s been uploaded
  • Approved-tool policy — a clear standard for which AI tools are approved for which work, replacing the free-for-all
  • Employee guidance — plain-language direction on what’s safe to use AI for, framed around better ways to work
  • Ongoing monitoring — because new tools keep showing up; this is a maintained effort, not a one-time report

A memo telling employees to stop won’t hold – the tools are too useful. What works is knowing what’s already out there and giving employees an approved way to get the same speed without the exposure.

Most organizations are surprised by what a BII Runoff audit turns up.