Congressional staff now use ChatGPT, Claude, and Gemini for official government work. Internal documents reveal these tools operate with minimal oversight or formal security guidelines. This gap exposes sensitive legislative data to commercial model training. Practitioners should note the tension between rapid tool adoption and the lack of federal data governance frameworks.