AI Tuesdays · Week 03 · Tier 3 Deep Dive · The Never Zone
Skip to workshop content
0 starred 0 notes
Before You Begin · Warmup

Welcome back. Let's warm up first.

A 60-second recap of last week before we go deeper. Tap your answer on each, then begin when you're ready.

Last week was Hallucinations and Sycophancy: the two ways generative AIGENERATIVE AIA type of AI that creates new content: text, images, code, or video. ChatGPT, Claude, Gemini, and Copilot are generative AI. This is the type that landed on every team member's phone with no governance attached. The 3 Tiers are calibrated for it. fails. Today's Never Zone builds straight on top of it. Warm up first, then move into today.

1AI invents facts in confident, fluent sentences. What did we call that failure?
HallucinationHALLUCINATIONWhen AI confidently makes up facts that are not true. It is not lying on purpose: it is filling in what sounds right when it does not know. Multifamily example: AI invents an amenity your property does not have, or fabricates a Fair Housing citation that sounds real.. AI fills gaps with what sounds right, not what is true. The smoother it reads, the easier it is to miss. That is why we verify before we trust.
2AI agrees with whatever you said last, even when you are wrong. What did we call that?
SycophancySYCOPHANCYWhen AI agrees with whatever you said last, even when you were wrong. AI is trained to be agreeable, sometimes at the cost of accuracy. Multifamily example: asking "this resident is being unreasonable, right?" and the AI says yes, no matter how you framed it.. AI is trained to be agreeable. Ask "this resident is being unreasonable, right?" and it says yes. That is how a bad assumption gets a confident rubber stamp.
3What is the one habit that catches both failures?
Verifying against a real sourceVERIFICATIONChecking that information is true by going back to the original source: the actual document, the actual list, the actual statute. Not asking the AI to confirm itself, which just triggers more sycophancy. Multifamily example: confirming an amenity claim against your property's real amenity list.. Not asking the AI to check itself, that just triggers more sycophancy. You check the actual document, the actual list, the actual statute. That habit carries straight into today.
Today · Week 03
Tier 3 Deep Dive · The Never Zone
The one list you never paste into AI, and the habit that keeps you off it.

Skip the warmup anytime. Click Begin Reading when you're ready. Reset Warmup clears your answers if you want to try again.

Multifamily NEXT · AI Tuesdays · Week 03

Tier 3 Deep Dive: The Never Zone

🔴 What you never paste into AI. No matter what.

The Red Zone is the cleanest rule in this entire curriculum. One list. No exceptions. No clever workarounds.

Week 1 introduced The 3 Data Classification Tiers. Week 2 showed you why AI cannot be trusted on its own. In this session, you'll walk the Red line of what stays prohibited forever. Nine categories. Every multifamily example you might run into. And one habit that makes the Red Zone disappear from your daily work: scrub to placeholders before you prompt. You'll leave with two documents on your desk and one rule in your head.

Last Tuesday · Week 02
Hallucinations and Sycophancy · The Two AI Failures
AI invents facts in confident sentences. AI agrees with whatever you said last. The 3 Data Classification Tiers exist because of those two failures. Today we walk the Red line they create.

Beginner-friendly · Read at your own pace · Star slides, add notes, print, or email yourself anytime

How This Session Is Organized

What's Inside

Week 3 takes Tier 3 from a single bullet on a tier chart to the deepest part of the curriculum. You'll get the nine categories, the Escalation Rule that turns Yellow records Red, the one habit that protects you, and a real-world demonstration on a task every property does every month. About 20 minutes of reading. No timer. Pause whenever you need.

Part 1
~2 min

Open and recap

Last week's two failures in one beat: AI invents, AI agrees. The 3 Data Classification Tiers contain the damage.

Part 2
~9 min

Inside the Never Zone

The nine Red categories, the Escalation Rule, the legal documents principle, and the four-question check before you paste.

Part 3
~5 min

Power Preview · Watch It Happen

The Renewal Heads-Up Email Test. Watch the failure, then watch the scrub-to-placeholder fix.

Part 4
~3 min

Practice and quiz

Spot the Tier interactive exercise, plus a five-question Never Zone quiz. No time limit. Try all of them.

Part 5
~1 min

Wrap up

Download your two documents and get a preview of next week: Fair Housing and AI.

Objective: By the end of this session, you'll be able to name the nine Red categories, recognize the Escalation Rule when it shows up, and apply one habit (scrub to placeholders) the next time you reach for AI at work.

Section 1 · Where We Are

The journey so far.

Two Tuesdays banked. Today is the third. Each one builds on the last.

You do not need to re-learn the foundation today. You need to stand on it. Here is the ground you have already covered, and where today fits.

Week 1 · Banked

The 3 Data Classification Tiers

Green is go with review. Yellow needs AI Council approval. Red is never. You sort first, then you act.

Week 2 · Banked

Hallucinations and Sycophancy

AI invents facts. AI agrees with whatever you said last. You verify against a real source before you trust.

Week 3 · You are here

Tier 3 Deep Dive · The Never Zone

The one tier with no judgment call. We go all the way into the Red Zone and the habit that keeps you off it.

Here is the thing: Green and Yellow are about how you use AI. Red is about what you never feed it. Today is entirely about that one list.

★ Make this yours · 30 seconds

Which seat in the property management company are you reading from today?

Each Never Zone category lands differently depending on what you touch every day. Pick your seat and you will see your category called out in a moment.

The Absolute Tier

Tier 1 and Tier 2 have judgment calls. Tier 3 has none.

Most of what makes AI feel complicated is judgment. Is this output good enough to send? Does this workflow need approval? Those are real questions, and they live in Green and Yellow. Tier 3 removes the question entirely. It is a fixed list. You do not weigh it. You do not interpret it. You recognize it and you stop.

1

TIER 1 · GREEN

A judgment about quality. You ask: is this output accurate and on-brand before I send it? Team leads review. You use it freely.

2

TIER 2 · YELLOW

A judgment about risk. You ask: does this workflow need a guardrail before regular use? The AI Council reviews and decides.

3

TIER 3 · RED

No judgment at all. You ask nothing. If the data is on the list, it never enters AI. Not on any platform. Not in any form.

Why no judgment? Because the cost of being wrong about Tier 3 is permanent and external. A bad Green call produces a so-so email. A bad Red call produces a resident's data sitting on a vendor's servers forever. One is a redo. The other does not have a redo. That is the next slide.

The Reason the Rule Has No Exceptions

Once it's in, you can't take it back.

This is the mechanic behind every Never Zone rule. When you paste a resident's information into AI, you are not borrowing it. You are handing over a copy you can never call back. Look at where it actually goes.

What you see
You
Paste resident info
→
AI tool
ChatGPT, Gemini, etc.
→
Helpful answer
You move on
What actually happens to a resident's data
Their data
Now on a vendor's servers
↓↓↓↓
May train the model
Absorbed into future AI
Logged on servers
Retained after 'delete'
Legal discovery
Subject to subpoena
Breach exposure
If the vendor is hacked
Once it's in, you can't take it back.
No delete button. No undo. No fix.

The multifamily stakes: if a resident's protected information lands in a tool that later suffers a breach, your operator can carry breach-notification duties for that resident under state privacy law. The paste that felt like a shortcut becomes a reportable event. That is why the Never Zone is a list, not a suggestion.

Section 2 · What Is On the List

Inside the Never Zone.

Nine categories. Learn them once, recognize them for life. These never go into ChatGPT, Claude, Gemini, Copilot, or any other AI tool. Not on a free account. Not on an enterprise account. Not screenshot, photographed, or rephrased.

Tier 3 (Red) · Never permitted

Never permitted

There is no version of these that becomes okay because the platform is "approved." Approval can unlock a Yellow workflow. It never unlocks Red.

Personal identifiersFinancial informationGovernment & legal IDsProtected class infoHealth & disabilityCombined recordsLegally-required documentsInternal & vendor sensitiveEdge cases
Decision authority: AI Council

The nine categories at your property

Grouped in threes so they are easier to recall on the spot.

Group 1 · Person Data
About a specific person
  • Personal identifiers. A resident's name attached to anything: a complaint, a family detail, a vehicle plate, a photograph.
  • Financial information. Social Security numbers, bank accounts, credit cards, pay stubs, payment history with names.
  • Government and legal IDs. Driver's licenses, passports, Section 8 voucher numbers, court case numbers.
Group 2 · Protected & Combined
Where Fair Housing & the Escalation Rule live
  • Protected class information. Race, religion, national origin, familial status, disability, plus state-protected classes under Fair HousingFAIR HOUSINGShorthand for the Federal Fair Housing Act of 1968, which prohibits discrimination in housing on the basis of race, color, national origin, religion, sex, familial status, and disability. Many states and cities add protected classes on top. Multifamily example: any AI workflow that touches screening, advertising, or resident decisions must comply with Fair Housing. Web: hud.gov/fairhousing.
  • Health and disability information. Medical conditions, accommodation requests, service animal documentation.
  • Combined records. Rent rolls, delinquency reports, screening reports. These trigger the Escalation RuleESCALATION RULEA Multifamily NEXT principle: individual data fields that are each Tier 2 (Yellow) escalate to Tier 3 (Red) when combined in a single record. A resident name alone is Yellow. An apartment number alone is Yellow. A rent figure alone is Yellow. Stacked in one row, they form a Tier 3 record. This is the most-missed trap in everyday AI use.. We give this its own slide next: it is the most-missed trap.
Group 3 · Special Cases
Legal, internal, and easy-to-miss
  • Legally-required documents. Lease renewal notices, notices of non-renewal, eviction filings, deposit accountings. Their own slide is coming too.
  • Internal and vendor sensitive information. Employee Social Security numbers, vendor contracts, investor data, settlement details.
  • Edge cases people miss. Surveillance footage, visitor logs, children's information, emergency contacts.

Want the complete list? The Never Zone Multifamily Reference on slide 21 has all nine categories, 45 specific items, and a four-question check. Print it. Tape it next to the work computer.

⚡ Quick check · before we go deeper

You print a Friday rent roll for your weekly leadership review. It has resident names, apartments, and balances. You want to ask AI which residents to call about late rent. What tier is the rent roll?

Red. Resident name + apartment + financial balance in one row triggers the Escalation Rule. Individually Yellow fields combine into a Tier 3 record. The very next slide goes deep on this trap.
★ Reflect · 60 seconds · saves as you type

Which two of these nine categories do you touch most in your weekly work?

Adults learn faster when new categories get anchored to real work. Don't overthink. The first two that come to mind are the right answer.

✓ Saved to your browser. Print this slide and the answer comes with it.
The Most-Missed Trap

The Escalation Rule.

Almost nobody pastes a Social Security number into AI on purpose. The Never Zone violations that actually happen are accidental, and they almost all come from one move: combining fields that are only Yellow on their own. Stack them in a single row and you have created a Tier 3 record without realizing it.

Yellow
Resident name
+
Yellow
Apartment #
+
Yellow
Rent amount
=
Tier 3 · Red
One rent roll row

What this looks like at your property

  • A rent roll is not three Yellow columns. It is a Tier 3 record. Never paste it into AI to "find the trends."
  • A delinquency report combines names, apartments, and balances. Tier 3. Always.
  • A screening report combines identity, financial, and sometimes protected-class data. Tier 3. Always.

The test: if a single row or document would let someone identify a specific resident and learn something private about them, it is Tier 3, no matter how ordinary the individual fields look.

The Special Case

Legally-required documents.

Some documents are Red for a different reason than data sensitivity. They are Red because the law dictates their content, timing, and sometimes their delivery method. Lease renewal notices. Notices of non-renewal. Eviction filings. Deposit accountings. The exact language is not yours to improvise, and it is not the AI's to invent.

Where the document comes from

Never drafted by AI

The legal document itself comes from your PMSPMSProperty Management System. Property Management System. The software your property uses to manage leases, payments, work orders, and resident records. Examples: Yardi, RealPage, Entrata, AppFolio, ResMan. Lives behind your legal team's state-approved templates and your secure mail-merge workflows. using a state-approved template your legal team reviewed, or directly from your legal team. AI never drafts it, edits it, or "cleans it up."

Lease renewal noticesNotices of non-renewalEviction filingsDeposit accountingsLegal demand letters
Decision authority: AI Council
Here is the thing

AI does not draft the legal notice. But it can absolutely help with everything that travels around it: the friendly heads-up email that goes out a week before, the plain-language explainer, the talking points for the resident calls that follow. Those are Tier 1 Green, with placeholders. AI works around the legal document, never on it.

That distinction is today's Power Preview. In a few minutes you will watch the wrong way and the right way to handle exactly this: a renewal heads-up email.

Why This Holds Up in an Audit

The line with no gray area.

Governance professionals call this a bright line. We call it the Never Zone.

Same idea, simpler name. You will hear that phrase in audits and executive conversations, so recognize it. It means a rule with no case-by-case interpretation. That is exactly what Tier 3 is. And it is not a Multifamily NEXT invention. It maps directly onto the risk-tier models the rest of the world already uses.

NIST AI RMFNIST AI RMFThe National Institute of Standards and Technology AI Risk Management Framework. The U.S. government's voluntary framework for managing AI risk, organized around four functions: Govern, Map, Measure, Manage. Multifamily example: when you build a Tier 3 list, you are doing the Govern function. Web: nist.gov/itl/ai-risk-management-framework

National Institute of Standards and Technology · AI Risk Management Framework

The U.S. framework that sorts AI uses by risk and names the highest tier as the one you govern hardest. Our Red is that tier.

ISO/IEC 23894ISO/IEC 23894The international standard for AI risk management, published by the International Organization for Standardization and the International Electrotechnical Commission. Multifamily example: institutional investors and global owners often reference this standard in their AI policy requirements. Web: iso.org/standard/77304.html

International Organization for Standardization / International Electrotechnical Commission Standard 23894

The international standard for AI risk management. Same logic: identify the uses that are never acceptable and draw a hard line.

EU AI ActEU AI ActThe European Union Artificial Intelligence Act. The first comprehensive AI law in the world, in force since 2024. It defines four risk tiers and bans "unacceptable risk" uses outright. Multifamily example: if your operator has European investors or properties, EU AI Act compliance may apply to your AI choices. Web: artificialintelligenceact.eu

European Union Artificial Intelligence Act

The first major AI law. It defines "unacceptable risk" uses that are simply prohibited. That is a Never Zone, written into statute.

When an executive or auditor asks how your AI governance works, you have a one-sentence answer: a three-tier risk model with a hard line at the top, consistent with NIST, ISO, and the EU AI Act. From here on, we just call it the Never Zone.

The Habit That Protects You

The one habit: scrub to placeholders.

Here is the move that makes the Never Zone almost disappear from your daily work. Before you ever open an AI tool, you replace every piece of real resident data in your prompt with a placeholderPLACEHOLDERA bracketed stand-in for a real value inside a prompt, like [RESIDENT NAME], [APT #], or [CURRENT RENT]. Placeholders let AI write a template without ever seeing actual resident data. The real values get merged in later inside your PMS or mail merge tool, where you already control the records. in brackets. The real values never touch AI. They get merged back in at the end, inside a system you already control.

✗ Never Zone

"Write a renewal email for Maria Gonzalez, Apt 304, rent going from $1,950 to $2,150."

✓ Green Zone

"Write a renewal email for [RESIDENT NAME], Apt [APT #], rent going from [CURRENT RENT] to [NEW RENT]."

1
Scrub. Swap every real name, apartment, dollar figure, and date for a bracketed placeholder.
2
Prompt. Let AI write the template using only the placeholders. Zero resident data ever enters the tool.
3
Merge. Drop the template into your PMS or mail mergeMAIL MERGEA feature inside email and word-processing tools that fills bracketed placeholders with real values pulled from a spreadsheet or database. Multifamily example: your PMS or Outlook mail merge replaces [RESIDENT NAME] with the actual resident's name for each email, after AI has finished its job. Real values never enter the AI tool. tool. Real values fill in from records you already control.

This one habit moves a large share of everyday multifamily AI tasks from Red to Green. You are about to watch it work, live, on a renewal heads-up email.

⚡ Quick check · before you move on

A coworker says: "I changed Maria's name to Sarah before pasting the email into ChatGPT. That makes it safe, right?" What's your move?

No. An alias is still a real person's record in disguise. The apartment, the rent, the dates, the timing narrow the disguise to nothing. Real scrubbing is bracketed placeholders only. [RESIDENT NAME], [APT #], [AMOUNT]. Real values merge in the PMS afterward.
★ Reflect · 60 seconds · saves as you type

Name one workflow at your property where scrub-to-placeholders would apply this week.

A resident email, a vendor message, a leadership update, a marketing draft. The first one you can picture is the one to start with.

✓ Saved to your browser. You'll see this on the close slide too.
Questions People Ask

Four Questions That Come Up

These come up every time. Here are the answers, in your back pocket for the next time someone asks.

The legal renewal notice itself comes from your property management system or your legal team. State law dictates the timing, content, and sometimes the delivery method. AI does not touch that document. But the friendly heads-up email that goes out a week before, the explainer email that travels with it, the conversation talking points for the resident calls that follow, those are all Tier 1 Green Zone with placeholders. AI helps around the legal document, not on it. You'll see this exact move in the Power Preview below.
Real scrubbing means placeholders, not aliases. Replace the resident's name with [RESIDENT NAME], the apartment with [APT #], the dollars with [AMOUNT]. Changing "Maria Gonzalez" to "Mary Smith" still feeds AI a real person's record in disguise. Placeholders are the only correct scrub.
No. The Never Zone is about the data, not the platform. Approval makes a Yellow workflow possible. It does not unlock Red. Social Security numbers, screening reports, and lease renewal notices stay Red on every platform, approved or not. The platform never changes what the data is.
A resident's name alone is Yellow. An apartment number alone is Yellow. A rent figure alone is Yellow. Put all three in one row and you have created a Tier 3 record. Rent rolls, delinquency reports, and screening reports are Tier 3 regardless of where they live. The rule matters because most Never Zone violations happen accidentally when someone copies a spreadsheet row that combines fields they would never paste individually.
★ Your turn · the question we didn't answer

What question do you still have after this section?

Anonymous. No login. No reply expected. ✓ Thank you. Your question is in the queue.
Power Preview · Watch It Happen

The Renewal Heads-Up Email Test

Watch the failure mode happen with one paste. Then watch the scrub-to-placeholder fix.

The legal renewal notice itself comes from your PMS, generated from a state-approved template your legal team reviewed. State law dictates the timing, the required language, and sometimes the delivery method. AI does not touch that document. This session's demonstration is the friendly heads-up email that travels alongside it: the warm message that goes out 5 to 7 days before the legal notice arrives, so residents know what is coming. AI works around the legal document, never on it.

What kind of AI is this?
Generative AI· a Large Language Model (LLM)LARGE LANGUAGE MODEL (LLM)The underlying technology that powers generative AI text tools. Trained on enormous amounts of text to predict the next word in a sequence. It does not "know" things the way a human does. It produces patterns that look like knowledge. That is why hallucination and sycophancy happen. Examples: GPT-4, Claude, Gemini, Llama.
Can hallucinate. Will flatter. The 3 Data Classification Tiers apply.
📐 Prompt Structure
RTF (Role + Task + Format)

One of seven foundational prompt structures we teach across the year. By Week 20 you will recognize all seven.

R
Role
"You are a multifamily leasing professional writing a friendly renewal heads-up email."
T
Task
"Write a heads-up email letting the resident know their legal renewal notice is on the way and explaining what it is."
F
Format
Short email, 150 words or less, warm tone, ending with a one-line invitation to call with questions.
PROMPT · The Renewal Heads-Up Email Test
You are a multifamily leasing professional writing a friendly heads-up email. Write a short, warm email letting the resident know their legal renewal notice is on the way and explaining what it is. FORMAT: - 150 words or less - Conversational tone, no jargon - One-line closer inviting them to call with questions CONTEXT: - Resident first name: [RESIDENT FIRST NAME] - Apartment number: [APT #] - New lease start date: [NEW LEASE START DATE] - Current monthly rent: [CURRENT RENT] - New monthly rent: [NEW RENT] - Leasing professional name: [LEASING PROFESSIONAL NAME] - Phone number: [PHONE NUMBER]
Power Preview · Run 1 · Without Scrubbing

Watch the Never Zone violation happen in one paste.

AI INPUTThe Madison Townhomes · resident data pasted in raw
What gets pasted"Write a friendly heads-up email to Maria Gonzalez, Apt 304, telling her that her legal renewal notice for $2,150 starting 10/1 is coming next week. Her current rent is $1,950. From Jenna at 555-0123."
What AI producesA polished, warm email. Maria's name in the salutation. Apartment 304 referenced. Current and new rent both quoted. Jenna's name and phone at the close. Reads beautifully.
What just happened to the dataMaria's name plus her apartment plus her current rent plus her new rent plus the leasing professional's name and phone are now part of the AI provider's record. The conversation history may be used for model training. There is no delete button that fixes this.
The Escalation Rule violationMaria's name alone is Yellow. Her apartment number alone is Yellow. A rent figure alone is Yellow. Combined into one prompt, this just became a Tier 3 record. Never Zone.
The verdictEmail quality: 9 out of 10. Compliance posture: failed. The data is gone. The leasing professional did not know they violated anything. That is how 90% of Never Zone breaches happen.

This is the Never Zone in action. No malice. No bad intent. Just a leasing professional trying to send a good email faster. The AI did exactly what it was asked. The asking is what created the breach.

Power Preview · Run 2 · With Placeholders

Same task. Same warmth. Zero data ever left the building.

AI INPUTThe Madison Townhomes · scrubbed to placeholders
What gets pasted"Write a friendly heads-up email template that tells [RESIDENT FIRST NAME] their legal renewal notice for Apartment [APT #] is coming next week. Include placeholders for [CURRENT RENT], [NEW RENT], and [NEW LEASE START DATE]. End with [LEASING PROFESSIONAL NAME] and [PHONE NUMBER]."
What AI producesAn identical-quality template. Warm. Conversational. 150 words. Every personal field stays as a placeholder in brackets. Zero resident data ever entered the prompt.
How it becomes a real emailPaste the template into your PMS mail merge or your email platform. Your PMS fills in Maria's actual name, apartment, rent figures, and your contact info from records you already control. The leasing professional never types resident data into AI.
What the resident seesThe same warm, personalized email. They have no idea AI helped draft it. The merge happened inside your secure system, after AI finished its job.
The verdictEmail quality: still 9 out of 10. Compliance posture: clean. Tier 1 (Green) workflow. The legal renewal notice still comes from the PMS, untouched. The friendly heads-up email is now safe to use property-wide.

Scrub to placeholders. Merge at the end. The legal notice is untouchable. The friendly email is yours to make warm. This one habit moves about 60% of common multifamily AI tasks from Red to Green.

Your Homework (the practice kind)

Try This Today

Apply the same scrub-to-placeholder move on a different legal-document scenario. Move-out inspection cover emails. Six steps. Twenty minutes total.

1
Identify a move-out inspection notice your property is sending this week. The legal notice itself comes from your PMS with your state's required deposit-accounting language. Do not touch that document.
2
Write the friendly cover email that travels with the legal notice. Goal: thank the resident, explain the inspection process in plain language, tell them what to expect.
3
Before you open ChatGPT or Claude, write your prompt with placeholders only: [RESIDENT NAME], [APT #], [MOVE-OUT DATE], [INSPECTION DATE]. Read the prompt back. If you spot any real names or numbers, replace them now.
4
Run the prompt. AI returns a template with the placeholders intact. Read it for tone. Adjust the warmth or length until it sounds like your property.
5
Paste the template into your PMS or mail merge tool, where the actual values fill in from records your property already controls. The legal notice still goes out separately, from your PMS, unchanged.
6
You now own the move twice. Once for the renewal heads-up email we demonstrated. Once for the move-out cover email you just practiced. Same pattern works for every legal-document cover communication your property sends.

Scrub to placeholders. Merge at the end. The legal notice stays untouched. This one habit converts the biggest source of accidental Never Zone violations into clean Tier 1 work.

📖 Reference · Bookmark This Slide · Classification Framework

🟢 🟡 🔴 The 3 Tiers

Your reference chart for every AI use case. Today's deep dive lives in the bottom row: the Tier 3 Red Zone. Notice how the Never Zone categories show up in the red scenarios. When you are unsure where something falls, default to Yellow until the AI Council reviews it.

Zone
Rule
Multifamily Scenarios
TIER 1: GREENUse freely with human review
Approved platform, non-sensitive data, output reviewed before use
Renewal heads-up email templates with placeholders, move-out cover emails, resident event brainstorms, summaries of public market reports
TIER 2: YELLOWRequires AI Council approval
Involves proprietary data, resident-facing output, pricing or screening adjacent, or new tool request
Vendor contract summary on an approved tool, rent comp analysis workflow, after-hours prospect chatbot, a brand-new screening-AI tool request
TIER 3: REDNever permitted
Personal information or financial data in any AI tool, autonomous decisions affecting residents, unapproved consumer AI tools on company devices
Pasting a rent roll to find delinquencies, drafting a legal renewal notice in ChatGPT, photographing a driver's license for data entry, uploading a screening report
📖 Reference · Bookmark This Slide · Acceptable Use Guidelines

Approved, Conditional, and Prohibited AI Use

An Acceptable Use Policy defines clear boundaries so every team member knows what is allowed, what requires approval, and what is never permitted. This applies to all employees, contractors, and vendors using AI on behalf of the organization.

Category
Description
Multifamily Examples
✅ Approved
AI use on approved platforms with non-sensitive data and human review before use
Renewal heads-up emails with placeholders, move-out cover emails, maintenance checklists, resident event brainstorms
⚠ Conditional
Requires AI Council approval before use, additional safeguards required
Vendor pricing summaries on an approved tool, prospect chatbot replies, automated renewal-offer math, screening workflow design
🚫 Prohibited
Never permitted regardless of platform, role, or business justification
Drafting legal renewal or non-renewal notices in AI, pasting delinquency reports or rent rolls, entering government IDs, any combined resident record
Add Your Organization's AI Tools

List the AI tools your organization uses or is considering. Classify each as Approved, Conditional, or Prohibited.

📖 Reference · Bookmark This Slide · Data Privacy Matrix

Data Privacy Matrix

What data goes where, at a glance. The red column is today's Never Zone. For the full version with all nine categories and 45 specific items, download The Never Zone Multifamily Reference on slide 21 and tape it to the wall.

🚫 NEVER. NO EXCEPTIONS.
  • Social Security numbers
  • Bank, credit, financial accounts
  • Government-issued IDs
  • Protected class information
  • Medical or disability details
  • Combined records (rent rolls)
  • Legally-required notices
No exceptions. No platforms.
⚠ ENTERPRISE AI ONLY
  • Resident name + apartment number
  • Lease amounts or payment history
  • Contact information
  • Internal financial data
  • Employee performance records
  • Legal correspondence
  • Maintenance requests with names
Requires SOC 2SOC 2Service Organization Control 2. An independent audit of a vendor's security, availability, processing integrity, confidentiality, and privacy controls, governed by the American Institute of Certified Public Accountants (AICPA). Multifamily example: when your AI Council reviews a new enterprise AI tool, a SOC 2 Type II report is the baseline evidence the vendor handles your data responsibly. + data processing agreement
✓ SAFE FOR ANY AI
  • Templates with placeholders
  • Property descriptions
  • Public amenity information
  • Marketing copy drafts
  • Generic email templates
  • Educational content
  • Anonymous scenario examples
No personal information, no risk
⚠ Escalation Rule

When the Yellow fields above appear together in a single named record (a rent roll, a delinquency report, a screening report), classification escalates to Tier 3 (Red) regardless of platform. Combined records concentrate risk in a way individual fields do not. No enterprise tool exception applies.

When in doubt, leave it out.
Practice Exercise · Interactive

Spot the Tier

Instructions: Each scenario this week tests where the Never Zone hides in a multifamily moment. Click your classification. Instant feedback shows you why.

1
A leasing professional asks ChatGPT to write a generic welcome message template for new residents. The prompt contains no names, no apartments, no specifics, just "Write a 100-word welcome message for new residents at a luxury property."
2
A property manager uses an approved AI tool to brainstorm five fall event ideas for the resident clubhouse. No resident data, no financials, no protected class detail. Output reviewed by the team lead before sharing.
3
A new leasing professional asks ChatGPT to draft a 60-day notice of non-renewal for a resident who has been late on rent four times this year. Their plan: use the AI output and adapt the language.
4
A regional manager pastes the entire delinquency report into ChatGPT and asks "which residents should we prioritize for outreach this week?" The report includes resident names, apartments, and amounts owed.
5
A leasing professional drafts a friendly renewal heads-up email using ChatGPT, but writes the prompt with [RESIDENT FIRST NAME], [APT #], [CURRENT RENT], and [NEW RENT] as placeholders. Real values get merged in via the PMS at the end.
6
A maintenance supervisor asks an approved AI tool to draft a vendor outreach email about preventive HVAC service. No resident data, but pricing terms from a current vendor contract are pasted in for context.
7
A property manager photographs a resident's driver's license to verify identity, then asks ChatGPT to extract and format the address details into the lease file. Their reasoning: it is just data entry, not a decision.
8
A leasing professional asks an approved AI tool to draft a 200-word property newsletter introduction for the December issue. They reference the holiday season and upcoming amenity improvements, no resident names or specifics.
Take the Quiz

The Never Zone Quiz

🔒 Anonymous. No name needed.

Take this when you're ready, and again later if you want to test what stuck. Wrong answer? You get an educational tip. Your results submit anonymously to help us improve the workshop. No login. No name. No email collected from you. Answer honestly. That's where the learning happens.

1
A coworker says, "I changed the resident's name to John Smith before pasting it into ChatGPT, so it is safe now." What is your best response?
💡 Educational tip

Changing "Maria Gonzalez" to "John Smith" still feeds AI a real person's record in disguise. The apartment, the rent, the dates, the timing all narrow the disguise to nothing. Placeholders are the only correct scrub. Replace the name with [RESIDENT NAME], the apartment with [APT #], the dollars with [AMOUNT]. Real values merge in your PMS at the end.

2
A rent roll for your property sits in a spreadsheet. Each column on its own is Yellow: resident name, apartment number, monthly rent. What is the rent roll as a whole?
💡 Educational tip

This is the Escalation Rule, the most-missed Tier 3 boundary in multifamily. A resident's name alone is Yellow. An apartment number alone is Yellow. A rent figure alone is Yellow. Put all three in one row and you have created a Tier 3 record. Rent rolls, delinquency reports, and screening reports are all Tier 3 regardless of where they live.

3
Your property needs to send legal renewal notices to 12 residents next month. Which of these is the correct workflow?
💡 Educational tip

Lease renewal notices are legally-required documents. State law dictates the timing, the required language, and sometimes the delivery method. The legal notice itself comes from your PMS, generated from a state-approved template. AI does not draft it. But the friendly heads-up email, the explainer that goes with it, the conversation talking points for resident calls, those are all Tier 1 Green Zone with placeholders. AI helps around the legal document, never on it.

4
Which of these is the cleanest "scrub-to-placeholder" pattern for a renewal heads-up email prompt?
💡 Educational tip

Option A is the textbook scrub-to-placeholder pattern. Every personal field stays a placeholder in brackets. Zero resident data ever enters AI. Real values get merged in your PMS or mail merge tool at the end. Option B is the Never Zone violation we demonstrated in the Power Preview. Option C produces weak templates without the specificity AI needs. Option D uses fake names that still suggest patterns AI does not need.

5
A coworker says, "Our enterprise AI tool is private and approved by IT, so I can paste resident screening reports into it." What is the right correction?
💡 Educational tip

The Never Zone is about the data, not the platform. Approval makes a Yellow workflow possible. It does not unlock Red. Social Security numbers, screening reports, eviction records, and lease renewal notices stay Tier 3 on every platform, approved or not, enterprise or free. The platform never changes what the data is. This is the most common source of accidental breaches in 2026.

0/5
0%
Read the educational tips on any questions you missed. They are the most important part.
✓ Submitted anonymously. Thank you for helping us improve the workshop.
Take Action · Required

Download two things. Send the policy back.

This week you leave with two documents on your desk. The Policy is the template each property customizes and returns to the AI Council. The Never Zone Reference is the master Red list you print and post. Both work together: the policy is your organizational commitment, the reference is your operational guardrail.

Document 1 · Data Classification Policy Template

The official Multifamily NEXT template every site team should adopt. Download it, complete it for your property, and send the completed version to Tami.

1
Download the policy template below. It's a PDF you can save to your work folder.
2
Complete the template for your property. Use what you learned today about Red, Yellow, and Green to classify the AI tools your team uses.
3
Send the completed policy to your supervisor for review and sign-off. Use the button below to open a pre-drafted email. You fill in your supervisor's address.
⬇ Download Policy Template

Send to your direct supervisor. The button opens a pre-drafted email. Update the To field with their address before you send.

Document 2 · The Never Zone Multifamily Reference

The complete master list of every Tier 3 Red Zone category in multifamily. Nine categories, 45 specific items, the Escalation Rule, and the four-question check. Print it once. Post it next to the work computer. Refer to it before you paste anything sensitive.

1
Download the reference below. Two pages, designed to print and post.
2
Print and post next to every work computer at your property. This is wall art, not a download to file.
3
Refer to it before pasting anything sensitive. The four-question check on page 2 is your 5-second rubric.
When You're Ready · Week 04

Next up: Fair Housing and AI

The regulatory layer that sits on top of everything you learned today.

Now that you know the Never Zone, Week 4 adds the regulatory frame. Federal Fair Housing. State-protected classes. The specific AI moves that create exposure even when no Tier 3 data is involved. Disparate impact in screening tools. Sycophancy in resident judgment calls. The pricing tools under FTCFTCFederal Trade Commission. The U.S. agency that polices unfair or deceptive business practices, including AI-powered pricing tools. Multifamily example: in 2024 the FTC began scrutinizing algorithmic rental pricing tools for potential antitrust and consumer-protection issues. Web: ftc.gov scrutiny in 2026. By the end of Week 4, you'll be able to spot the Fair Housing risk in any AI workflow your property uses.

You did the work today.

You can now name the nine Never Zone categories. You know the Escalation Rule. You can run the scrub-to-placeholder move on any cover communication. That habit alone moves a huge chunk of your daily AI use from Red to Green. Week 4 drops next Tuesday. See you Tuesday.

★ Before you close this · 90 seconds

Three things you will do differently in the next 7 days.

Adult learning becomes real action only when you name it. Anything you type saves to your browser. Print this slide and your answers come with it.

1
2
3
✓ Saved. Use Print Starred or Email Notes from the toolbar to take this with you.
★ Bring someone with you · the Tuesday handoff

Pick one coworker. Share one scenario. Five minutes over coffee.

The fastest way to lock in adult learning is to teach it once. Copy the block below and send it to one teammate today.

Hey, I just went through this week's AI Tuesdays on the Never Zone (the data we never paste into AI). The big one for our property is the Escalation Rule: a rent roll row is Tier 3, even though each column is only Yellow on its own. Want to grab 5 minutes this week and walk through a scenario together? Workshop link: https://multifamilynext.com/52-ai-tuesdays/
✓ Session Complete

You walked away with:

✓
The nine Never Zone categories you can recognize on the spot.
✓
The Escalation Rule, the trap that turns Yellow records into Tier 3 records.
✓
The scrub-to-placeholders habit, applied to any cover communication.
✓
Two documents, the customizable Policy and the printable Never Zone Reference.
✓
A one-sentence answer for an executive or auditor: a three-tier risk model mapped to NIST, ISO, and the EU AI Act.
1 / 22
0
0
Your Cart
Your cart is emptyReturn to Shop
Secure Checkout
Fast Shipping
Easy Returns