Assessment · available now
During a live deal, confidential information carries its highest value and its hardest consequences at the same time. The AI Confidentiality Exposure Assessment finds every channel by which deal information can reach an external AI model, and what the company could actually show about each.
Why the deal window
Continuous or timely disclosure rules in your listing jurisdiction, insider trading law, the counterparty's confidentiality deed and the price itself all depend on information staying inside. Which of them applies, and how, is counsel's determination.
| What the company's controls check | What actually leaves | Where it lands |
|---|---|---|
| File identity, access rights and classification labels | Three paragraphs of the synergy model, pasted into an assistant to tidy the wording | The vendor's context window, under its retention, logging and training terms |
| Patterns: keywords, formats, blocked file types | The due diligence summary, asked of a chatbot on a phone | An enterprise assistant answering from any deal folder the user can open |
| Destinations: blocked domains and uploads | Fragments across a hundred prompts that add up to the deal | A ban pushes use onto personal devices, where the company's controls disappear |
That is not a gap in the company's configuration. It is a gap in the category of control.
Five minutes that show the problem
01
A redacted paragraph from a past deal, or this one if counsel allows: a valuation assumption, a synergy line, a condition precedent.
02
Reword it the way a diligent analyst would before asking an AI tool for help. No names, no numbers that match a pattern.
03
DLP, sensitivity labels, the web filter, the assistant policy. Watch it pass every one.
04
If it had gone out, what could the company show the board, the counterparty or a regulator about what left, and when?
The moment the question stops being an IT setting and becomes a board question. The demonstration produces no finding on its own.
Seven channel kinds
A ban on a tool does not remove a channel. It usually moves use onto a personal device, where the company's controls do not reach. The register records the move.
| Channel | Where it sits | Example |
|---|---|---|
| Sanctioned enterprise assistant with reach over stored content | Your estate | An assistant answering from any deal folder the user can open |
| Sanctioned AI tool that receives what a user submits | Your estate | An enterprise chatbot licence; AI features in office, email or browser |
| Embedded AI in collaboration and meeting tools | Your estate | Meeting transcription and recaps; AI notetakers on deal calls |
| Unsanctioned AI reached from a managed device | Your estate | A consumer chatbot opened in the browser on a company laptop |
| Personal device | Personal | A chatbot on a phone, with a deal page photographed or retyped |
| Data-room and document movement | Your estate or an adviser's | Exports, downloads and forwards that land a document where AI can reach it |
| Adviser tooling | An adviser's estate | Each bank's, law firm's and technical adviser's own AI tools |
The non-egress evidence ladder
Each channel is placed on the ladder three times: the rung its reach indicates, the rung counsel says the company can require, and the rung that can actually be produced and checked. The finding is the gap between the last two.
| Rung | What the company holds | Closes the paraphrase gap? |
|---|---|---|
| N0 · None | Nothing | No |
| N1 · Direction | A written AI-use direction to the deal team and insider list, with dated acknowledgements | No |
| N2 · Attestation | A signed statement from a tool's terms or an adviser: what is retained, whether content trains any model, what their tools can reach | No |
| N3 · Configuration | A dated export of the settings in force, with change history for the deal window | No |
| N4 · Record | A retrievable log of what crossed the channel in the deal window, with who and when | Partly: shows what left, after the fact |
| N5 · Containment | Evidence that the channel could not reach deal content at all during the deal window | Only for channels that reach stored content |
| N6 · Meaning control | A control at the boundary that reads the meaning of outbound text, independent of the AI, with a signed record per submission | Yes |
What you receive
01
Every path by which deal information can reach an external model: sanctioned tools and their terms, personal accounts, assistant reach over deal folders, data-room exports, each adviser's tools.
02
Can the company show the information did not leave, and what evidence would it need? "No reasonable reach" stays a valid finding.
03
Tenant settings, DLP, information barriers and adviser clauses. Most of the register closes with configuration and contract.
04
Paraphrased and aggregated meaning, which no deployed control reads. Named per channel, with the class of control that would close it.
Legal and technical halves
Counsel leads
Triodian produces
Interviews and documents only, through counsel: no system access, no deal data, no prompt logs read, no vendor approached. The deal is referred to by a code name. We work with large law firms in alliance with Triodian, or with your own.
Beyond the deal
Designs, process formulas, tenders and client files leak the same way: rephrased in a user's own words, or in fragments that add up over a year. The Semantic Gate puts everything bound for a model you run or rent through one governed path, and records each decision.
Where it stops
It never states whether information was price-sensitive, whether a carve-out was lost, or whether a deed was breached.
The register holds channels, terms, settings and records. Never a deal document, price, counterparty name or valuation.
It establishes what could be shown. It does not investigate whether anything left.
Closing the residual gap is a separate decision for the company.
Get in touch
Thirty minutes to test whether the question is live, through your counsel.
Book a 30-minute conversation →