03 · What You Need to Know
The Missing Question Is Often Authority, Not Technology
Sharing something with you does not make it public
Researchers routinely exchange unpublished work with collaborators. That sharing usually occurs within a relationship and for a purpose: review this draft, run this analysis, check these calculations, contribute to this paper, or prepare this presentation.
The material does not thereby become public or available for unrestricted onward disclosure.
Submitting it to an externally operated AI service can introduce another party or processing environment into the workflow. Whether that is acceptable depends on what the collaborator authorized, explicitly or through the project's agreed arrangements.
Possession, authorship, and authority are different concepts
You may have a copy of a file without owning it. You may be a co-author without controlling every contribution inside it. You may own some intellectual property while the university, funder, sponsor, or another collaborator has rights in other parts.
Access
You are legitimately able to view or work with the material.
Authority to disclose
You are permitted to provide the material to another recipient or processing service under the applicable arrangements.
The first does not automatically establish the second.
Collaborative research often contains overlapping rights and obligations
A single manuscript or dataset can combine contributions from many sources.
| Material |
Who may have an interest |
What to check before AI disclosure |
| Co-authored manuscript |
All authors, institutions, sponsors |
Agreed AI use, confidentiality, publisher and institutional requirements |
| Collaborator's preliminary data |
Data generator, participants, institution, funder |
Data-sharing terms, ethics, consent, security, permitted processing |
| Unpublished code |
Developer, research group, institution, sponsor |
Ownership, license, confidentiality, proprietary information |
| Student's thesis chapter |
Student and potentially institution or collaborators |
Permission, supervisory expectations, unpublished intellectual contribution |
| Industry partner material |
Company, university, investigators |
Nondisclosure agreements and contractual restrictions |
| Joint invention |
Inventors and potentially their institutions |
Intellectual-property and technology-transfer requirements |
This is why a blanket statement such as "I am a co-author, so I can upload it" is unreliable.
Permission can depend on what you want AI to do
Not every AI use exposes the same amount of material. Asking an AI assistant to improve one generic sentence differs from uploading a collaborator's entire unpublished dataset and asking for exploratory analysis.
A collaborator might be comfortable with language editing in an institutionally approved AI environment but object to their raw data being uploaded to a public chatbot. Permission should therefore be sufficiently specific to the proposed use when the distinction matters.
Confidentiality can exist without a formal NDA
Researchers sometimes assume that information is confidential only when a document has "CONFIDENTIAL" stamped across the first page or a formal nondisclosure agreement exists.
Collaborative research is often shared under professional and project-specific expectations that unpublished drafts, preliminary findings, research ideas, and internal discussions will remain within the team until the group decides otherwise. Formal agreements can strengthen or define those obligations, but the absence of an NDA does not automatically make unpublished material suitable for external disclosure.
At minimum, uncertainty about a collaborator's expectations is a reason to ask rather than a reason to assume permission.
Removing the collaborator's name does not necessarily solve the problem
If the concern were solely personal identification, removing names might reduce some risk. But unpublished collaborative work can be sensitive for reasons unrelated to identity.
The material may contain a novel method, preliminary finding, research idea, proprietary dataset, patentable invention, unpublished code, or confidential partner information. All of those can remain sensitive after the author's name disappears.
Even where identification is the concern, contextual information may still reveal the researcher, institution, project, or participants. The limitations of removing names before submitting research information to AI therefore apply here too.
A no-training setting does not create permission
Suppose the AI provider promises not to use your prompts to train its models. That may make the service more acceptable for some research workflows, but it cannot grant rights over somebody else's unpublished work.
If your collaborator has not authorized external processing, changing the AI account's training settings does not supply the missing permission. Nor does it resolve any institutional, contractual, participant, or intellectual-property restrictions attached to the material.
Watch Out
Do not treat privacy controls as substitutes for permission. A highly private AI system can still be the wrong place for information you were not authorized to disclose to it.
Participant data can make collaborator permission insufficient
There is another layer. Even if your collaborator says, "Sure, upload it," that permission may not be enough when the material contains research-participant information or data governed by ethics approval, consent, data-use agreements, privacy law, or institutional security requirements.
A collaborator cannot necessarily authorize a use that the research protocol itself does not permit.
The decision must therefore account for both interpersonal permission and the formal governance of the research information.
Institutional and sponsor agreements may control the decision
Collaborations involving multiple universities, companies, hospitals, government agencies, or external funders often operate under agreements defining confidentiality, publication, data use, intellectual property, and authorized systems.
Where such agreements exist, informal approval from one collaborator may not override them. Researchers may need to consult the principal investigator, data custodian, research office, technology-transfer office, legal office, information-security team, or another designated authority.
Peer review is an especially clear example of limited-purpose access
The logic becomes easiest to see in peer review. A journal sends a reviewer another researcher's unpublished manuscript. The reviewer has legitimate access to it, but that access exists solely for confidential evaluation. It does not create permission to upload the paper elsewhere.
Major publishing guidance accordingly restricts disclosure of peer-review material to AI. The same conceptual distinction is useful in collaboration: authorized access for a particular research purpose does not imply unlimited onward disclosure.
The stricter case is discussed separately in using confidential peer-review material with AI.
Sometimes you can accomplish the task without the collaborator's material
Before asking for permission to upload a 50-page draft, ask whether the AI actually needs it.
If you need advice about structuring a discussion section, you may be able to describe the structural problem abstractly. If you are debugging code, a minimal reproducible example may remove the proprietary project logic. If you need methodological guidance, a synthetic dataset can sometimes reproduce the analytical problem without exposing the original data.
Minimization does not replace permission when the remaining material still belongs to the collaborator, but it can sometimes eliminate the need to disclose their work at all.
Make AI expectations part of collaboration agreements early
Repeatedly asking permission for every minor AI-assisted task can become cumbersome in a long-term project. Research teams can reduce ambiguity by discussing AI use when establishing their workflow.
A team might agree which AI systems are approved, what categories of information may be submitted, whether full manuscripts can be uploaded, whether participant data are prohibited, what uses require consultation, and how AI assistance will be documented or disclosed.
That conversation turns an implicit assumption into an explicit research practice. As a bonus, it may prevent the traditional academic discovery that five co-authors had six different understandings of the workflow.
04 · A Practical Example
A Collaborator Sends You a Draft for Feedback
Hypothetical Example
A co-author shares an unpublished manuscript
A collaborator sends you a manuscript draft and asks, "Can you review the discussion before Friday?" The draft contains the collaborator's new theoretical interpretation, preliminary findings from another team member, and several participant quotations. You consider uploading the document to an AI assistant and asking it to identify weaknesses.
Interpret the permission you actually received
You were asked to review the discussion. Nothing in that request necessarily authorizes disclosure of the document to an external AI provider.
Identify other interests
The file contains contributions from other researchers and participant material, so the original collaborator may not be the only person whose authorization or governing rules matter.
Check the project rules
You review the team's AI policy, data-management arrangements, ethics requirements, and any applicable collaboration agreements.
Ask when permission is genuinely needed
If AI use is otherwise permitted but collaborator authorization remains necessary, you explain what tool you propose to use, what material would be submitted, and for what purpose.
Minimize disclosure
If approved, you provide only the material required for the task and keep participant or other restricted information out unless the system is specifically authorized for it.
The important step was recognizing that "please review my draft" did not silently contain the additional instruction "and feel free to disclose it to whichever AI service you prefer."
07 · A Quick Checklist
Before Uploading a Collaborator's Unpublished Work to AI
Before submitting someone else's unpublished research, check:
Identify who created, owns, controls, or has rights in the material you intend to submit.
Determine whether the permission under which you received the material includes the proposed AI use.
Check collaboration agreements, data-use agreements, nondisclosure agreements, sponsor terms, and institutional policies where applicable.
Identify participant data, proprietary information, potentially patentable material, licensed content, or other information requiring additional authorization.
Explain the proposed AI service and purpose clearly when seeking collaborator permission rather than asking only for a vague approval to "use AI."
Verify the AI service's current storage, retention, model-improvement, access, and deletion arrangements.
Submit only the minimum authorized material necessary for the task.
If authority remains uncertain, do not upload the unpublished work until the relevant collaborator or institutional authority clarifies it.