Awareness training makes people aware. It doesn't change their behaviour.

That's a starting inventory, not a surveillance log: every AI tool your organisation has touched, scored for risk, with nothing pre-approved and nothing pre-blocked by default.

And it is not limited to AI. The same behaviour lives in email: autocomplete filling in the wrong recipient, a Reply All on a sensitive thread, an attachment from the wrong folder. And on social media: a screenshot with a client name on it, a case shared "anonymously" that is not. Awareness is not something for the AI tool alone. It is needed everywhere data leaves the organisation. For AI, for email, for social media.

The same haste reaches the file, not just the message. A client file gets attached, a personnel document gets forwarded, and nobody stops to reread page three first. Opening that document and marking what's sensitive before it goes out, rather than trusting that whoever attaches it remembers what's inside, closes a gap that a training slide on "check your attachments" rarely reaches.

One pass through the PDF, the sensitive fields marked, before it leaves as an attachment.

#But training does work, does it not?

The fair objection: "So we should stop training?"

No. Training has a place. It builds a shared language, it makes people aware the risk exists, and for many frameworks it is simply required, think of the EU AI Act's AI-literacy obligation since February 2025. Without a base of knowledge, help in the moment also lands less well.

But training cannot be the control. It is a foundation, not a safety net. The problem starts when organisations tick the training off and assume the risk is now covered. That is hope, not control. The answer is not more or less training, but pairing it with something that is actually present at the moment of action.

And it has to feel like help, not surveillance. Nobody changes behaviour because they were named after the fact. People change behaviour when they get a nudge at the right moment, without it feeling like an accusation.

#What actually works

Four shifts that turn awareness into behaviour.

1. Move awareness to the moment of action. Not in advance in a room, but while someone types: in the AI tool, the email, the message.
2. Make it contextual. Show what is sensitive in this text right now, not a general rule to recall three weeks later.
3. Cover every channel. AI, email, and social media. The behaviour is the same everywhere, so the help has to be everywhere.
4. Measure behaviour, not tick boxes. Not how many people completed the training, but whether the number of risk signals falls, in aggregate and without tracking anyone individually.

That last shift makes awareness measurable for the first time. This is what that looks like:

No scoreboard per employee, but a trend: is it happening less, in which channels, and is what you changed working? That is the proof a completed training never gives you.

#What training cannot do

You can help people at exactly the moment that matters, instead of hoping they recall a training. BeeSensible recognises sensitive information as someone types, not only in AI tools but also in email and other web apps. Through the desktop app, detection runs entirely on the device; for browser-only use it runs in working memory on a BeeSensible EU server. Either way the text is discarded after analysis and nothing is stored. What is in there, a name paired with an account number, an IBAN, a national ID, is marked before it is sent. The employee decides.

Note: this is an email, not an AI tool. Same risk, same moment.

A good training is valuable. But a training is a moment, and the risk is a habit. You do not close that gap by telling people more often what they already know. You close it by being present the moment it goes wrong, in every channel where data leaves, and helping before a quick action becomes an incident. Awareness is valuable. But you do not change behaviour on Monday in the room. You change it on Thursday, in the prompt field, in the email, in the message.