---
title: "3. AI tools and confidential founder material"
slug: "regulatory-news-and-changes/3-ai-tools-and-confidential-founder-material"
section: "Regulatory news and changes"
description: "NIST's GenAI Profile supports risk identification around misuse, information integrity, privacy and human oversight. It is not itself a statute or guarante"
internal_only: false
---

# 3. AI tools and confidential founder material

NIST's GenAI Profile supports risk identification around misuse, information integrity, privacy and human oversight. It is not itself a statute or guarantee that a tool is “compliant”. Keep source-of-truth financial numbers outside unapproved third-party products; obtain a processor's written retention, training and subcontractor policies; and test deletion and access controls. [NIST Generative AI Profile, AI RMF](https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence)

For an adviser using AI in delivery, require disclosure of what is uploaded, how the model output is checked, whether client data is reused, who owns work product, and whether recordings are made. Incident response and conflict protocols matter more than a generic “AI-powered” promise.