How to build a dedicated AI check that compares external content against a written safeguarding communications rulebook, with a named human for borderline and consent questions.
The last piece in this series asked whether AI should touch beneficiary data at all, and landed on a cautious default of no. This piece is about a narrower, lower-risk cousin of that question: not the sensitive data itself, but the language an organisation uses about the people it serves in the content it puts out into the world, case studies, newsletters, annual reports, social posts. That is a genuinely good candidate for a dedicated checking tool, and it is worth being specific about why, because the reasons do not automatically transfer to every other task this series has covered.
A safeguarding language check is a comparison against a written rulebook, not a judgement call reinvented each time. That distinction is what makes it worth building once rather than reasoning through from scratch on every piece of content.
It means scanning a piece of external-facing writing against the organisation's own safeguarding communications standard: does any detail, a name, a precise location, an age paired with a rare circumstance, make a specific person identifiable even without naming them; does the described content match what consent was actually given for; does the language frame the person through pity or spectacle rather than as someone with agency; does the wording use the organisation's preferred terms rather than ones the policy has specifically ruled out. None of that requires touching the sensitive case data this series worried about last time. It requires only the finished piece of writing and a clear rulebook to check it against.
An earlier piece in this series, on which repetitive tasks are worth an agent and which are not, set out the test: a task worth configuring once is narrow, repeatable, and has a checkable standard behind it. A safeguarding language check passes all three. The same rules apply to the tenth press release as to the first, the same content type recurs dozens of times a year, and the standard being checked against is written policy, not personal instinct. A one-off prompt has to be reconstructed and reasoned through every time, which means the check depends on whoever happens to be writing that week remembering to run it at all, and remembering it the same way. A tool built once against a written rulebook applies the same standard every time, whether the tenth writer on the team wrote the piece or the first.
A safeguarding language check is not a judgement call rewritten every time. It is a rulebook, written once, applied the same way on the hundredth piece of content as it was on the first.
The tool's job is to flag candidates against the rulebook, not to make the final call. A borderline case, where a detail feels identifying but the rulebook does not clearly say so either way, belongs with a named protection or communications lead, not with whoever is closest to a keyboard. Any flagged consent question goes back to the person who actually holds that consent record, since a checking tool can confirm wording matches a stated scope, but it cannot confirm that scope was ever real. And the rulebook itself is not fixed forever. It needs the same kind of review this series argued for elsewhere, a fixed cadence rather than an ad hoc one, because language that read as acceptable a year ago can age badly as the organisation's own standards move on.
Build a dedicated safeguarding language check against a written rulebook rather than relying on ad hoc prompts, keep a named human owner for borderline calls and consent questions, and review the rulebook on a fixed cycle rather than waiting for a mistake to force the review.
No external statistic cited; this article presents an internal use-case breakdown rather than third-party evidence.
Both sides of the argument on putting beneficiary data into AI tools, and a conservative default: keep it out unless genuinely de-identified, with named sign-off every time.
AI Use Policy · 4 minGuide · 25 September 2026Why an AI policy needs a fixed six-month review against four specific questions, plus four yes-or-no triggers (departed contact, changed tool, repeated escalation, changed law) that force an earlier one.
AI Use Policy · 4 minIf this is the question on your desk, a thirty-minute call tells you whether the service fits, or that you do not need us yet.