AI and privilege after United States v. Heppner: what legal teams should know. Read the analysis →
Industries · 01 · Technology & SaaS

Source code is the crown jewel. A coding assistant is the easiest way out.

Engineers paste proprietary code into assistants. SREs paste logs with customer tokens. Product managers pilot AI on interview transcripts and the unreleased roadmap. Customer NDA and IP claims follow. Privilege AI gives technology companies an approved AI environment, a sensor for everything else, and counsel in the loop when a contract is on the line.

Data at riskSource code · architecture · customer data · IP
ObligationsCustomer MSAs & DPAs · SOC 2 · ISO 27001 · ISO 42001
BuyersCISO · CTO / CIO · General Counsel
Governed by03 Agent · 01 Privilege AI · 02 Watch
Who buys, and why

Three offices, three reasons.

CISOProtects data. Enforces policy. Sees the shadow.

Prevents source-code leakage, exposed customer data, and insider exfiltration. Enforces security policies and contractual data-processing obligations. Discovers shadow AI and monitors sensitive data transfers.

03 Agent · 02 Watch
CTO / CIOStandardizes the tools. Keeps the developers fast.

Protects proprietary software, architecture, and technical IP. Standardizes approved AI development tools and usage rules while enabling developer productivity without uncontrolled information sharing.

01 Privilege AI · 03 Agent
General CounselFinds the contractual exposure before the disclosure.

Reduces customer NDA, IP, and confidentiality claims. Enforces restrictions in customer and supplier agreements, identifying contractual exposure before sensitive information is disclosed.

01 Privilege AI · 02 Watch
Threat vectors

Where it happens in a technology company.

Engineering · Software EngineerAsks AI coding assistants to explain, refactor, or test code.Proprietary or customer code goes to a non-approved assistant. Very high risk of IP and trade-secret loss and customer confidentiality claims.Sponsor: CTO / VP Engineering · Decides: CTO / CISO
Engineering · Site Reliability EngineerInvestigates errors using logs and AI troubleshooting.Customer logs or service tokens are pasted into external AI. Very high risk of customer privacy and contract claims and breach response.Sponsor: CTO + CISO · Decides: CISO / CIO
Product · Product ManagerPilots AI products for UX research and design.Pilots run without inventory, purpose review, or approved handling rules. High risk of customer confidentiality exposure and product IP leakage.Sponsor: CPO + CTO · Decides: CTO / CIO
United States v. Heppner · AI & legal privilege

Keep IP and incident questions connected to counsel.

A code dispute, customer incident, or licensing question can pull engineering and legal into the same sensitive material. Heppner shows why the workflow matters before anyone asks AI to analyze it. Surface potential exposure, bring legal questions into a matter, and document counsel’s role while reviewing how proprietary and customer information may be used.

The platform, applied

One Legal Risk Governance Platform, for a company built on code.

01 · Privilege AIThe approved AI environment.

Claude Fable 5.1, Claude Opus 5.5, and ChatGPT Astra 6 on your company's own keys. Customer-contract questions escalate to counsel in the session; 0 matters are trained on.

Privilege AI
02 · Privilege WatchCode and customer data, detected.

Detections from Claude, ChatGPT, and the Agent in one queue — the customer module, the token in the log, the roadmap — routed to legal with reporting.

Privilege Watch
03 · Privilege AI AgentSource-code leakage, on the workstation.

EDR sensor for compliance on Windows and Mac: unapproved assistants, personal accounts, insider exfiltration, 120+ categories — alerted to legal and compliance.

Privilege AI Agent
Customer MSAs & DPAsSOC 2ISO 27001ISO 42001Trade secrets