What your AI vendor keeps
Turning off training is not enough. Many AI vendors keep your prompts for at least 30 days, backups can hold them longer, and a subpoena reaches whatever they retain.
When privilege may not cover you
Before you draft anything sensitive with AI, talk to your actual lawyer. Courts are still deciding whether that work is privileged.
Briefing examiners
When examiners ask how you use AI, tell them, show your documentation, and keep an expert in the loop.
The full conversation covers the questions to ask your vendor and when zero data retention helps.
General guidance, not legal or compliance advice.
The speakers
Carolyn Dicharry
Founder and CEO, Canaria
Carolyn founded Canaria in 2019. Before that she was the compliance officer at Ripple, and earlier she worked at a bank and at a cross-border payments firm.
Carolyn on LinkedInJane Khodarkovsky
Former federal prosecutor
Jane spent about a decade as a prosecutor at the local, state and federal level, including at the US Department of Justice, working on anti-money laundering and human trafficking cases. She was later general counsel of the Celo Foundation.
Jane on LinkedInMore from the conversation
- Some providers offer zero data retention, which does not cover their consumer chat apps.
- A local model keeps the work on your own machine, and needs enough memory to run.
- Staff using AI on personal phones may be sharing personal data with the vendor.
- Have your AI documentation ready before the exam, and build it yourself if the vendor does not supply it.
- Treat that documentation as a living document, and check every privacy update the vendor sends.
Write to advisory@canaria.xyz.
