Combatting data governance risks of public generative AI tools