In this article · 13 sections
- 01Where AI helps
- 02Principle 1: A human stays accountable
- 03Principle 2: Verify, don’t trust
- 04Principle 3: Protect confidential data
- 05Principle 4: Mind security
- 06Principle 5: Respect intellectual property
- 07Principle 6: Keep craft and thinking sharp
- 08Principle 7: Be transparent
- 09Practical workflows
- 10Measure the real impact
- 11Common mistakes
- 12Checklist
- 13Final thoughts
AI assistants can now draft code, suggest layouts, summarise research and generate images. Used well, they remove tedious work and speed up exploration. Used carelessly, they introduce bugs, security gaps, copyright problems and confident-sounding mistakes. The teams getting the most from these tools are not the ones that trust them most. They are the ones that have clear habits for using them.
This guide describes a responsible approach for design and development teams.
Where AI helps
AI tools are strong at tasks involving patterns and language:
- Drafting and boilerplate: first versions of code, tests, documentation and copy
- Explaining: summarising unfamiliar code, errors and long documents
- Exploring options: brainstorming names, layouts, approaches and edge cases
- Transforming: converting formats, refactoring, translating text
- Reviewing: spotting possible bugs, inconsistencies or accessibility issues for a human to confirm
- Research support: clustering interview notes or feedback themes for a person to check
They are weaker at tasks requiring up-to-date facts, deep context about your product, rigorous reasoning or accountability for consequences.
Principle 1: A human stays accountable
AI output is a draft from a fast, tireless but fallible assistant. The person who uses it owns the result.
- Review everything before it ships
- Understand code before committing it. If you cannot explain it, do not merge it.
- Treat generated designs as starting points to evaluate against research and brand
- Do not blame the tool for mistakes. Quality standards do not change.
Principle 2: Verify, don’t trust
Models can produce plausible but wrong answers, including invented APIs, outdated approaches and false citations.
- Run the code, test it and read it
- Check facts and sources against official documentation
- Be sceptical of confident explanations of niche topics
- Add automated tests and static analysis so errors are caught consistently. See how to test a mobile app.
Principle 3: Protect confidential data
Anything pasted into a tool may be processed or stored by a third party.
- Never share secrets, credentials, personal data or client confidential information with tools not approved for it
- Read the tool’s data retention and training policies, and choose business plans or settings that match your obligations
- Use anonymised or synthetic data for examples
- Follow client contracts and regulations, such as privacy laws
- Create a short team policy listing approved tools and what may be shared
Principle 4: Mind security
Generated code can contain vulnerabilities or insecure defaults.
- Review authentication, input handling, data storage and dependencies carefully. Use the mobile app security checklist and website security basics.
- Check that suggested packages exist and are reputable. Models sometimes invent package names, which attackers can exploit.
- Run dependency and secret scanners in your pipeline
- Be careful about prompts that include untrusted content, which can contain hidden instructions
Principle 5: Respect intellectual property
- Understand the licensing and ownership terms of the tools you use and the outputs they produce
- Be cautious with generated images, music and text in commercial work, particularly where originality or brand distinctiveness matters
- Do not feed in others’ copyrighted or confidential material you do not have rights to use
- Keep records of how AI contributed to deliverables when clients or regulations expect transparency
Rules differ by region and are still evolving, so consult legal advice for important cases.
Principle 6: Keep craft and thinking sharp
Over-reliance dulls skills and produces generic work.
- Use AI to speed up exploration, then apply human judgement to choose and refine
- Do the thinking on strategy, user needs and trade-offs yourself. See the UX process.
- For design, ground decisions in real user research, not generated opinions. AI cannot replace talking to users. See user interviews.
- Junior team members need to learn fundamentals, not just prompt for answers. Pair them with reviewers.
Principle 7: Be transparent
- Tell clients and teammates when AI materially contributed, where expected or required
- Disclose AI use to end users where they interact with AI directly. See adding AI features to your app.
- Be honest in marketing about what AI does and does not do
Practical workflows
For developers
- Ask for a plan or approach before code, and challenge it
- Generate code in small pieces you can review
- Have the tool write tests, and then check that the tests really test something
- Review diffs as you would a colleague’s pull request
- Run linters, type checks and security scans
- Document decisions yourself, instead of pasting unreviewed explanations
For designers
- Use AI for mood exploration, copy variants and quick concepts
- Judge outputs against brand, accessibility and user needs. See accessibility basics.
- Recreate final assets properly in your design system
- Avoid shipping raw generated imagery without checking quality and rights
For product teams
- Use AI to summarise research notes, then verify against the originals
- Draft documents like PRDs, then edit them with real context
- Keep decisions and reasoning owned by named people
Measure the real impact
Do not assume AI always saves time. Track whether it reduces cycle time without raising defect rates, rework or review burden. Collect honest team feedback, and adjust where it helps or hurts.
Common mistakes
- Merging code nobody understands
- Pasting confidential data into unapproved tools
- Trusting generated facts and package names
- Shipping unreviewed output
- Replacing user research with AI opinions
- Having no team policy
Checklist
- Approved tools and data rules written down
- Human review required for all AI-assisted work
- Code tested, scanned and understood before merge
- Facts and dependencies verified
- Licensing and IP terms understood
- AI use disclosed where expected
- Skills and user research still prioritised
- Impact on quality and speed measured
Final thoughts
AI is a powerful assistant and a poor decision-maker. Use it to move faster on the routine, keep humans responsible for quality and judgement, and protect your clients’ trust. If you want a team that blends modern tools with careful engineering and design, see our app development service or contact us. For deeper technique, read prompt engineering basics.