EXCUBO
ENES
Template kit · 4 of 4

Safe-use rules for AI tools and agents

AI assistants and agents can read email, fill in forms and sign in to services. That makes them useful, and it also opens a new way in. These rules keep a person in charge of anything that touches money.

Free template. Adapt it to the tools you use.

Banks are starting to write AI agents into their terms. See our post on Wells Fargo's AI-agent terms. Always read your own bank's current terms before letting any tool sign in or act for you.

1 Our rules

  1. Keep a list. Every AI tool, assistant, note-taker, browser extension and agent goes on the list below, with what it can reach.
  2. People approve money. No AI tool may send payments, add payees or change bank details. Where a tool offers read-only access, use it.
  3. No passwords, codes or card numbers in AI tools. Don't paste them into chats, and don't hand an agent your banking login. Use official connections with limited permissions where they exist.
  4. Least access. Give each tool only the mailbox, folders or accounts it needs. Remove access when you stop using it.
  5. Distrust instructions inside content. Emails, web pages and documents can carry hidden instructions aimed at AI tools. An agent never acts on a payment or bank-detail request it finds in a message.
  6. Check your bank's terms before connecting any tool to online banking.
  7. Review every months, and whenever someone leaves.
  8. If something goes wrong: cut the tool's access, change the affected passwords, tell your bank and tell .

2 AI tools list

ToolWhat it can reachCan it pay or change details?Set up byLast reviewed

Part of the free Excubo template kit. General guidance, not legal advice. Reviewed 27 October 2026.