One Password, One Owner, One Log

Three small habits that prevent big AI headaches. I call it one password, one owner, one log.

One password: every AI tool gets its own strong, unique password, stored in a password manager — not on a sticky note, not shared in a group chat. When someone leaves the team, you change the ones they touched. Ten minutes of discipline.

One owner: every tool has one named person responsible for it. Not the whole team — one name. When a question comes up at 4pm on a Friday, everyone knows who to ask.

One log: a simple record of what the tool is used for. It doesn't have to be fancy — a shared doc with dates and one-line entries works. When something looks off, the log tells you where to look. When nothing looks off, the log proves it.

None of this is exciting. That's the point. The businesses that get hurt by AI aren't the ones missing advanced security — they're the ones missing basics. Password, owner, log. Do all three and you're ahead of most companies ten times your size.

I explain frameworks; I don't give legal counsel.