ConceptIntermediateResponsible AI & Advanced Practice / Building an AI PM portfolio / #17

What should you avoid putting in an AI PM portfolio?

GUARD the portfolio piece is a complaint-transcript summarizer built for Cascade Wireless's escalation team

Cascade Wireless is a fictional telecom carrier. Saoirse Mullally built a tool there that summarizes long customer-complaint transcripts for escalation agents, so an agent can catch up on a case in seconds instead of scrolling through a full call log. Ekene Bassey, her mentor, reviewed the portfolio draft Saoirse built after leaving the company.

The direct answer
Never put real customer or real employer data in a portfolio, not even one screenshot with a single real name or account number visible in the corner. Rebuild every example with realistic but fully invented data before anything goes public. A real customer whose complaint appears in your portfolio never agreed to that, and has no way to find out or object, no matter how blurred or cropped the screenshot looks.
Do this, in order
  1. Rebuild every example with invented names, numbers, and complaint text before anything goes public.Why: a real person's words in a portfolio is a real harm to them, with zero benefit to them in return.
  2. Treat blurring or cropping as insufficient on its own.Why: other visible details, a case number, a date, a phrase, can still identify someone even with a name blocked out.
  3. Leave out real employer metrics, internal tool names, and anything under an active confidentiality agreement.Why: the harm here lands on a former employer instead of a customer, but the same lack of consent applies.
  4. Never include a live credential, API key, or working internal link.Why: this isn't a privacy risk, it's a live security hole sitting in a public document.
  5. Check every image at full zoom, not just at a glance.Why: a detail invisible at normal size is often fully legible once someone actually zooms in.
  6. Have someone else review specifically for identifiable details before you publish.Why: the person who built the tool has stopped seeing the real data as real, because they've looked at it too many times.

How to answer this, stage by stage

Nobody is grading whether your project looks impressive. They're grading whether you know exactly who could get hurt by how you chose to show it.

Stage 1
Scope it to one real portfolio decision
Say it like this
"I'll answer this for a complaint-summarizer I built at a telecom carrier, and the real screenshots I was tempted to use to show it off."
Why this works
Grounds an abstract "what to avoid" question in one real, specific temptation.
Stage 2
Say your structure out loud
Say it like this
"I'll use GUARD. Groups, who's affected. Unequal, who bears the risk. Ability to contest, who gets a say. Reduce, the actual fix. Detect, how I'd catch it if I slipped."
Why this works
Signals a real risk analysis, not just a gut feeling about what looks unprofessional.
Stage 3
Name both people
Say it like this
"There's me, choosing what to publish, and there's the actual customer whose complaint sits in that screenshot, who has no idea any of this is happening."
Why this works
Names the operator and the subject plainly, instead of only thinking about the operator's own risk.
Stage 4
Say who bears the risk
Say it like this
"I get a stronger portfolio either way. The customer gets a permanent public record of a private complaint, with no benefit to them at all."
Why this works
States the imbalance plainly, without smoothing it over as a minor technicality.
Stage 5
Say who never gets to push back
Say it like this
"That customer can't ask for it to come down, because they'll never know it exists. I have every lever here. They have none."
Why this works
This is GUARD's strongest move: naming who has no ability to contest, plainly, without moralizing.
Stage 6
Give the actual fix, and how you'd check it
Say it like this
"I rebuild every example with invented data, and I have someone else zoom into every image before I publish anything, since I've stopped seeing the real data as real."
Why this works
Ends on a concrete design and check, not a vague promise to "be careful."

Let's learn

A complaint-transcript summarizer is a tool that reads a long, messy customer conversation and gives an agent the short version: what happened, what the customer wants, what's already been tried.

Ekene Bassey has reviewed dozens of AI PM portfolios. In a recent stretch of reviews, she checked each one specifically for real, identifiable customer or employer data, something most candidates never think to scan for on their own.

Knowledge spark: what counts as identifiable? Not just a full name. A phone number, an account number, an exact date and a specific complaint detail together, even a distinctive phrase a real person actually said, all of it can point back to one real, findable person.

Across those reviews, a striking share of portfolios had at least one real identifiable detail sitting somewhere in a screenshot, usually one the candidate had genuinely stopped noticing.

Portfolios containing at least one real identifiable detail
40 20 0 17 of 40 Contained a real detail 23 of 40 Fully synthetic
Just over four in ten portfolios Adaeze reviewed carried a real, identifiable detail somewhere, almost always one the candidate hadn't noticed themselves.

Here's the turn: the problem was never that these candidates were careless people. It's that a screenshot you've looked at fifty times during development stops looking like real data to you, even though it's still real data to everyone else.

A screenshot you've seen fifty times stops looking like a real person's words to you. It never stops being a real person's words.

At its worst: a portfolio piece gets shared widely, a former customer or colleague recognizes their own complaint or their own name, and what should have been a proud, persuasive artifact becomes a real complaint about the candidate instead.

The decision that mattered Rebuild every example from scratch with invented names, numbers, and complaint text, and have a second person specifically hunt for identifiable details before anything goes public.

What I would leave alone: describing the tool's general purpose, its architecture, and its aggregate, non-identifying metrics is completely fine to include in detail. None of that requires a real person's data to be persuasive.

The lesson: the fix for a privacy problem in a portfolio is never "blur it a little." It's rebuilding the example so there was never a real person in it to begin with.

Now here is the same thing as a story

The short version above is what you'd say defending your portfolio's data choices out loud. Read this one for how Saoirse almost got it wrong.

Saoirse Mullally spent five years handling escalated complaints herself before she ever built a tool for the job, and she can tell within a sentence whether a customer just wants to be heard or genuinely wants a refund.

Leaving Cascade Wireless to job-hunt, she wanted her portfolio to feel real, not like a sanitized demo. She pulled three of her favorite screenshots from actual escalation cases, the ones that best showed the tool catching a detail a tired agent had missed.

Hand sketched comparison diagram titled Two people, one lever. Left panel, a person icon labeled Saoirse, caption picks what to publish. Right panel, a red person icon labeled The customer, caption never gets a say.
One of these two people is choosing what gets published. The other doesn't know a choice is being made at all.

Adaeze, reviewing the draft on a video call, asked Saoirse to zoom into the corner of the second screenshot. A phone number, mostly cropped out, was still legible enough to read the last six digits clearly.

Hand sketched flow diagram titled Where the appeal should be and isn't. Five boxes: complaint recorded, screenshot saved, portfolio shared, no path back highlighted, customer unaware.
Nowhere in this chain does the customer ever get a chance to say no. That gap is the whole problem.

Saoirse hadn't noticed the number at all. She'd looked at that exact screenshot dozens of times while building the tool, and it had stopped registering as a real customer's actual phone number months ago.

Hand sketched decision tree titled Reading a blurred name two ways. Root, a blurred screenshot, branching to other details remain leads to still exposed, fully rebuilt fake data leads to actually safe.
Blurring one field isn't the same thing as making a screenshot safe. Only a full rebuild actually is.

Rebuilding all three examples with invented names, invented account numbers, and realistic but fabricated complaint text took Saoirse about four hours. The complaints still felt real, since she wrote them from genuine patterns she'd handled for years, just with no actual person behind any of them.

Hand sketched labeled parts diagram titled A properly rebuilt screenshot. Center document icon labeled Synthetic example, with four callouts: invented name, fake account number, realistic complaint, no real timestamp.
Every one of these four had to be true before Saoirse could trust the screenshot was actually safe to publish.

The real cost was never the four hours of rebuilding. It was that the original screenshots would have gone out to dozens of hiring managers, with a real person's phone number sitting quietly in the corner the whole time, if Adaeze hadn't happened to zoom in on a video call.

Hand sketched quadrant titled Sorting examples by risk. Axes how realistic it looks and how traceable to a real person. Cropped real shot sits high realism high traceability. Good synthetic sits high realism low traceability. Vague mockup sits low realism low traceability. Blurred real shot sits mid both.
A cropped real screenshot and a well-built synthetic one can look equally convincing. Only one of them still points back to a real person.

Using real screenshots had felt like the honest choice, proof the tool actually worked on real, messy data instead of a tidy demo. It stopped feeling honest the moment Saoirse realized "honest about the tool" and "fair to the customer in it" were two entirely different things.

I used real screenshots because they felt more convincing than anything I could invent. It took one zoomed-in phone number to see that "convincing" and "fair to the person in the photo" were never the same test.

GUARD, applied to your own portfolioNot a compliance checklist. GUARD is what forces you to name the person who never gets a say in your own story.

G
Groups. Who's affected.
Saoirse, choosing what to publish, and the real customer whose words sit inside the screenshot.
Names the operator and the subject, not just the candidate's own risk.
U
Unequal. Who bears the risk.
Saoirse gets a stronger portfolio. The customer gets a permanent public record of a private complaint, and nothing in return.
States the imbalance plainly, without softening it.
A
Ability to contest. Who never gets a say.
The customer can't ask for it to come down, since they'll never know a portfolio exists at all.
The hardest step, and the one most candidates never think to ask.
R
Reduce. The actual design fix.
Rebuild every example with invented names, numbers, and complaint text, written from real patterns but no real person.
A concrete rebuild, not a policy note or a training reminder.
D
Detect. How you'd catch a slip.
Zoom every image to full size, and have a second person specifically hunt for identifiable details before publishing.
Catches exactly what happened here: a detail the builder had stopped seeing at all.
Hand sketched icon list titled Five things to leave out. Items: real customer data, real employer metrics, unredacted tool names, a live credential, someone else's work.
None of these five require a policy document to avoid. They just require noticing them before you publish.
Real identifiable details caught, by zoom level checked
100% 50% 0 100% zoom 200% 300% 400% 20% 45% 75% 96%
At a normal glance, most real identifiable details go uncaught. At full zoom, nearly all of them surface. Adaeze's own six-digit phone number catch happened at exactly this level.

The recap, one line per letter: groups is naming both Saoirse and the customer, unequal is the one-sided benefit, ability to contest is the customer's complete lack of a lever, reduce is the full rebuild with invented data, and detect is zooming in and getting a second reviewer.

And if you want to be sure it really works, try it somewhere elseSame five letters, a public library's patron-question tool instead of a phone company. A different building, and the subject this time is a curious kid, not an angry customer.

Millbrook Public Library Network is a fictional library system. Piotr Zawadzki built an AI tool there that answers patrons' reference questions and logs the exchanges to improve over time. Aisling Doyle reviews his portfolio draft.

Mapped onto GUARD: the groups are Piotr, choosing what logs to show, and the actual patrons, including minors, who asked genuine, sometimes personal questions through the tool. The imbalance: Piotr gets a compelling real-world example; a patron, possibly a teenager researching a sensitive health topic, gets their question permanently attached to a public job-search document. The ability to contest is the same gap: no patron ever agreed to have their reference question used this way, and none of them will ever know it happened unless someone tells them directly. The reduce step here is identical in spirit: invent realistic reference questions instead of using logged real ones, however harmless a single question might seem on its own. The detect step adds one more layer specific to a library: checking not just names, but any combination of details, a specific rare book title plus a branch and a date, that could narrow a question down to one identifiable person even with no name attached at all.

Swap the trigger and it still runs.
Speed: an interviewer caps you at sixty seconds. Say "rebuild every example with invented data, and get a second reviewer before you publish anything," and stop.
Cost: there's no time to write a full new synthetic example before tomorrow's interview. Use a rougher, clearly-labeled placeholder over any real customer data, every time, no exceptions.
The model gets better, for real: even if a candidate's AI feature becomes far more accurate later, that's never a reason to relax which examples are safe to publish. Accuracy and consent are two completely separate questions.

Where people run it wrong.
They assume blurring one field, like a name, makes a screenshot safe, when other visible details can still identify someone.
They only check their own examples once, at a glance, instead of zooming in or asking someone else to look.
They treat this as a legal or compliance question instead of a real fairness question about a specific person who never got a vote.

How to use it live. When someone asks what to avoid in a portfolio, ask yourself one question first: is there a real person in this example who never agreed to be here. If the honest answer is yes, that example doesn't go in, no matter how good it looks.

Flashcards (tap any card to flip it)

1 · THE FRAMEWORK
What framework fits "what should you avoid putting in an AI PM portfolio"?
Tap to flip
ANSWER
GUARD: groups, unequal, ability to contest, reduce, detect. Ability to contest is the strongest move: naming who never gets a say.
2 · THE PERSON
Who is this answer about?
Tap to flip
ANSWER
Saoirse Mullally, a former escalation agent who built a complaint-transcript summarizer at Cascade Wireless.
3 · THE HABIT
What did Saoirse stop noticing in her own screenshots?
Tap to flip
ANSWER
A real customer's phone number, still partly legible in a cropped corner, after looking at that same screenshot dozens of times.
4 · THE MECHANISM
Why isn't blurring a name enough to make a screenshot safe?
Tap to flip
ANSWER
Other visible details, a case number, a date, a specific phrase, can still identify someone even with a name blocked out.
5 · THE OLD DECISION
What decision would you take back?
Tap to flip
ANSWER
Choosing real screenshots because they felt more convincing, without weighing that "convincing" and "fair to the person in it" are separate questions.
6 · THE NUMBER
Fill in the blank: of the 40 portfolios Adaeze reviewed, ___ contained at least one real identifiable detail.
Tap to flip
ANSWER
17, just over four in ten. Almost always a detail the candidate hadn't noticed themselves.
7 · THE FIX
What did Saoirse actually do to her three screenshots?
Tap to flip
ANSWER
Rebuilt all three with invented names, account numbers, and complaint text, written from real patterns but with no real person behind any of them.
8 · CROSS PRODUCT TRANSFER
Section 4 answers this again for a different product. Which one, and who's the subject there?
Tap to flip
ANSWER
Piotr Zawadzki's library reference-question tool at Millbrook Public Library Network. The subject is a patron, sometimes a minor, asking a genuine, personal question.

Check yourself Score: 0 / 0

Fill in the blank
1. Fill in the blank: at 400 percent zoom, about ___ percent of real identifiable details get caught, versus about 20 percent at a normal glance.
Show hint
Look at the line chart of detection rate by zoom level.
Show answer
96 percent. The detect step exists because a normal glance genuinely misses most of what full zoom would catch.
Multiple choice
2. Why does this answer treat "I blurred the customer's name" as insufficient on its own?
  • A. Because blurring tools are unreliable and often fail technically.
  • B. Because other visible details, dates, case numbers, exact phrases, can still identify the same person even without a visible name.
  • C. Because blurring takes too long to be worth doing.
  • D. Because hiring managers dislike blurred images on principle.
Show hint
Look at the decision tree about a blurred screenshot.
Show answer
B. A name is only one of several ways a real person can be identified. Removing it alone doesn't remove the others.
True or false
3. True or false: this answer says the customer whose complaint appears in a portfolio has a way to ask for it to be removed.
  • True
  • False
Show hint
Look at the A step: ability to contest.
Show answer
False. The customer never even knows the portfolio exists, so they have no way to ask for anything at all.
Short answer, where it wouldn't matter
4. Name something you can describe in full, real detail in a portfolio without this concern applying.
Show hint
Look at "what I would leave alone."
Show answer
Model answer: The tool's general purpose, its architecture, and its aggregate, non-identifying metrics. None of that needs a real person's data to explain clearly.
Short answer, apply it yourself
5. Think of a project you've worked on involving other people's real information, a survey, a support ticket, a customer call. What would you need to change before showing an example of it publicly?
Show hint
Think past just the person's name, to any other detail that could still point back to them.
Show answer
Model answer: Most people can name the obvious detail, a name, quickly, but miss a second or third one, a date, a rare detail, until they're asked to look twice.
Short answer, the number question
6. If Adaeze had only glanced at Saoirse's screenshot instead of zooming to full size, would the phone number likely have been caught? What does that say about a quick self-review?
Show hint
Look at the detection-rate chart at 100 percent zoom.
Show answer
Model answer: Probably not, since only about 20 percent of real identifiable details get caught at a normal glance. A quick self-review is not a real safeguard on its own.
Before you close the answer
Why this works
Tests whether you can name a real person harmed by a portfolio choice, not just a vague professionalism concern, and whether you can name a genuine, checkable fix instead of a promise to "be more careful."
Follow-up traps
"Isn't this overly cautious for a low-stakes portfolio project?" Response: no, the size of the audience doesn't change whether the customer consented, and a portfolio can be shared far more widely and permanently than the candidate expects.

"What if the real example is genuinely more persuasive than anything you could invent?" Response: a well-built synthetic example, based on real patterns without a real person behind it, can be just as persuasive, since what's actually persuasive is the tool's behavior, not whose name is in the corner.
If pressed
Cascade Wireless's real complaint transcripts, even fully anonymized ones, remained under an active confidentiality agreement Saoirse had signed at hire, meaning the employer-data concern here was a real, binding one, entirely separate from the customer-privacy concern, and both needed the same fix: full synthetic rebuilds, not partial redaction.
From U2xAI Academy

From answering questions to owning outcomes.

A live workshop where you ship a working AI agent, defend a launch decision, and walk away with a portfolio recruiters can't wave off, not just more questions to study.

  • A live AI agent you actually shipped
  • A launch decision you can defend under pressure
  • An interview-ready portfolio, not more flashcards
Know more