Companies are adopting AI tools fast, but I keep wondering about the human side of it — not whether the tools work, but whether engineers actually know what they're and aren't allowed to do with them.

Specific things I'm curious about: does your company have real AI usage policy or is it "use common sense"? Has anything gone wrong — data sent somewhere it shouldn't, AI used in an auditable decision with no trail? And if someone asked you today whether your team is compliant with AI Act or SOC2 in how they use AI — could you actually answer that?