Using AI to summarise emails and documents safely
A reader forwarded us a 14-page strata report last month and asked, essentially, “can I just get the AI to tell me what this means.” Fair question, and the honest answer is yes, mostly, provided you understand what happens to that document the moment you paste it into a chat box. That’s the bit most people skip.
Using AI to summarise long documents with AI tools has quietly become one of the most useful everyday applications of the technology, more useful in our view than most of the flashier stuff getting demoed on stage. It’s also one of the easiest ways to accidentally leak something you’d rather keep private. Both things are true at once, and the gap between them is where this explainer lives.
Why document summarising is the AI feature people actually use
Forget image generation and chatty companions for a second. The quiet killer use case for large language models, the tech underneath tools like ChatGPT, Copilot and Gemini, is turning something long and dense into something short and plain. A council planning notice. A superannuation statement. An email thread that’s ballooned to forty replies because nobody used “reply all” sensibly.
This is the kind of task these tools are genuinely good at, better than they are at most things people ask them to do. Summarising is pattern compression, essentially, finding the structure that’s already in the text and restating it shorter. It’s not inventing new facts out of nothing, which is where AI tends to go wrong. That doesn’t mean it’s foolproof, and we’ll get to where it still trips up. But as a category, document summarising is one of the few AI use cases we’d recommend to a sceptical relative without much hedging.
Verdict: this is the AI feature worth your time, not the ones getting the keynote slots.

What actually happens when you paste something in
Here’s the part that matters and gets skipped. When you paste text into a free consumer chatbot, that text typically leaves your device, travels to a server somewhere (often overseas), gets processed, and in many cases may be retained or used to improve the underlying model unless you’ve specifically opted out or you’re on a plan that excludes training use.
Read the terms for whichever tool you’re using. OpenAI, Google and Microsoft all publish privacy and data-use documentation for their consumer products, and the settings differ between the free tier and paid business tiers. Microsoft’s enterprise Copilot commitments, for instance, are different from what applies to a personal Microsoft account using Copilot in Copilot in Windows on a home PC. The free version and the paid, business-grade version of the same product can have meaningfully different data handling, and that distinction rarely makes it into the marketing.
Our reasonably contrarian take: we think Australians worry too much about AI summarising their grocery list and not nearly enough about what they’re pasting into these tools at work. A personal email about a plumber quote is low stakes. A client contract, a colleague’s medical leave details, or a document with someone else’s personal information in it is a different matter entirely, and that’s the stuff we see people paste in without a second thought because the tool is just sitting there in the taskbar.
The documents we’d think twice about
Some categories deserve more caution than others.
- Anything with another person’s personal information in it, including Medicare numbers, addresses, or health details, because you’re not just making a decision about your own privacy.
- Financial documents with account numbers or balances, particularly if you’re using a free tool without a clear no-training policy.
- Anything under a confidentiality clause, an NDA, or workplace policy, because “I didn’t realise pasting it into ChatGPT counted as disclosure” is not a defence your employer will find persuasive.
None of this means don’t use AI for documents. It means read the privacy settings once, pick a tool with a sensible data policy, and apply a bit of judgement about what’s going in the box.
A quick, sane way to summarise a long email thread
The practical workflow is simpler than it sounds. Copilot is already built into Outlook and Word for Microsoft 365 subscribers, Gemini sits inside Gmail and Google Docs, and most webmail clients now have some flavour of “summarise this thread” baked in. If you’re an Australian household paying for Microsoft 365 plans explained for Australian households, you likely already have access to a document summariser without installing anything new.
For a one-off document you don’t want sitting inside an ongoing account history, a standalone chatbot works fine, paste the text, ask for a summary in plain language with three main points and any dates or dollar figures flagged, and read the output against the original before you act on it. That last step is the one people skip, and it’s the one that matters most.
We’d also say: don’t summarise anything you haven’t at least skimmed yourself first. A summary of a summary of a contract is how people end up agreeing to terms they never actually read, which, incidentally, is a problem tech has had since the EULA became a thing nobody clicked through properly in the late 1990s. AI just makes the skipping faster.
Where AI summaries get things wrong
The failure mode worth knowing about is called “hallucination” in the industry, which is a politer term than it deserves. It’s when the model states something confidently that isn’t actually in the source document, usually a number, a date, or a condition that sounds plausible but was never there.
This happens more with longer, messier documents, scanned PDFs with formatting issues, or anything where the model has to infer structure rather than read it cleanly. It happens less with a clean email thread. It’s one reason we wouldn’t rely on an AI summary alone for anything with legal or financial consequences, a lease, a loan contract, a Centrelink notice. Use the summary to get oriented, then verify the one or two numbers that actually matter against the original text yourself.
Verdict: trust it to save you time, not to be your lawyer.
Scams are catching on to this too
Worth flagging, because it’s the obvious next step for scammers: as AI summarising becomes normal behaviour, expect more phishing attempts dressed up as “AI-summarised” documents or fake summary tools that actually just harvest whatever you paste in. The advice from the ACCC’s Scamwatch on verifying unexpected attachments and links applies here just as much as it does to a dodgy SMS. If an email arrives claiming to be an “AI summary” of a bill or a government notice, treat it the same way you’d treat an unexpected QR code scam attempt, which is to say, don’t click, go to the source directly instead.
And because so much of this now happens inside your inbox by default, it’s worth revisiting how locked down that inbox actually is. We’ve written before about why securing your email account underpins basically everything else you do online, AI summarising tools included, since most of them connect directly to it.
What businesses and regulators are doing about it
The regulatory side of this is still catching up, as it tends to. The Office of the Australian Information Commissioner has published guidance for organisations using AI tools that touch personal information, and the general principle under Australian privacy law hasn’t changed just because an AI model is in the pipeline: if you’re handling someone else’s personal information, you’re still responsible for where it ends up, including inside a third-party AI tool’s training data if you haven’t checked the settings.
For businesses this is becoming a genuine compliance question, not just an IT footnote. For individuals summarising their own bills and emails at home, it’s lower stakes, but the same logic applies in miniature: know where your data is going before you send it.
Getting the most out of AI summaries without the risk
A few habits make this genuinely useful rather than a liability. Use a paid or business-tier AI product for anything sensitive, since these generally come with clearer no-training commitments than free consumer tiers. Strip out names, account numbers and anything identifying before you paste a document in, if the summary doesn’t actually need them to make sense. Ask for the summary in a structured format, three bullet points, key dates, any amount owed, so you can sanity-check it fast against the source. And treat the output as a first pass, not a final answer, on anything that has money or legal standing attached to it.
None of this is complicated. It’s the same basic caution people eventually applied to online banking and cloud storage, applied a generation later to a new kind of tool. We reckon most Australians will get there faster than they did with those, if only because everyone’s now had a decade of practice being slightly suspicious of what they paste online.
Our take on where this settles
Document summarising is, in our view, the AI feature with the best ratio of genuine usefulness to overhyped marketing. It saves real time on real admin, strata reports, insurance renewals, the eleventh reply in a group email about school pickup roster changes. The risk isn’t the technology failing dramatically, it’s people pasting in things they wouldn’t hand to a stranger on the street, simply because the box is right there and the output feels private even when it isn’t.
Check the settings once, pick a tool with a sensible privacy policy, keep the sensitive stuff out of the free tier, and this becomes one of the more genuinely time-saving habits you’ll pick up from the current AI wave, long after the novelty of the chatbots that write poems about your dog has worn off.
— Dale Whitfield, Founding Editor, Tech Geek




