A policy stating “protect sensitive data” still requires developers to determine what information an AI assistant can access. A “high-risk” designation for a use case does not inform your SOC about ...