Data Classification Before Anything Else
Rules about tools cannot work. Rules about information can, and they need a classification simple enough that people apply it.
Risk
Sizing the risk
The risk sits in which classification of data goes where, not in which tool was used.
7 notes
What the Provider Does With Your Input
Four questions that determine the actual risk of any AI service, and where to find the answers.
Retention, Training and the Terms That Matter
The specific clauses worth finding in any AI service agreement, and what good and bad look like in each.
Consumer Accounts Versus Enterprise Agreements
The same service under two account types is two different risk propositions. The differences, and what they cost.
Model Output Risk: Accuracy and Attribution
Most attention goes to what you send. Several of the real incidents have been about what came back.
Regulated Data and Where It Cannot Go
Where the question stops being about judgement and becomes a hard constraint, with the categories that come up most.
Sizing the Risk Honestly
The discussion is dominated by figures nobody can support. What you can establish about your own exposure, and how.