AI Chatbot Security Checklist

What to assess Define what the bot can read, store, and change. A support assistant that only drafts replies should not have the same permissions as an account administrator.

How to apply it Treat user messages and retrieved documents as untrusted inputs. Test prompt-injection attempts and avoid putting secrets in model prompts.

Operational considerations Review logging and retention. Mask sensitive information when practical, limit staff access to transcripts, and publish a clear privacy notice.

Next step Require confirmation or staff review for account changes, refunds, and other consequential actions. Monitor incorrect answers and update source content.