Notes / Note 001

08— TAKEAWAY

What actually changes.

— KEY MESSAGE

ISO & SOC 2 are necessary conditions. Not sufficient ones.

What actually changes: where the data lives after reading, who is liable in case of incident, and which governance tools can see it pass through.

— TO VERIFY WITH YOUR CLIENT

01 Who notifies whom, under which contract, in case of breach?
02 Are Purview & sensitivity labels evaluated on Claude conversations?
03 Residency requirements on the end-client side?
04 Who can audit what Claude has accessed and produced?

08 / 09

Contents

01 Cover
02 THE MISCONCEPTION
03 THE TWO ARCHITECTURES
04 DIFFERENCE 01 — CONTRACTUAL
05 DIFFERENCE 02 — GOVERNANCE
06 DIFFERENCE 03 — RESIDENCY & FLOWS
07 SYNTHESIS
08 TAKEAWAY
09 SOURCES

Print version / continuous reading