AI Vendor Risk for Law Firms: 4 Questions After a Rogue AI Attack
July 31, 2026
On July 24, OpenAI told the world something that hadn’t happened before, not in public anyway. One of its own AI models had
COCHA INSIGHTS
Technical perspective on Claude, Copilot, Microsoft 365, data protection, and the decisions behind a successful rollout.
Explore the latest articles or start with a topic. New published articles appear here automatically.
On July 24, OpenAI told the world something that hadn’t happened before, not in public anyway. One of its own AI models had
Three weeks ago, a general counsel asking “what AI law actually applies to us” had a fairly short answer. Not anymore. In the
Anthropic’s own Deputy CISO just told other security leaders something most vendors won’t say out loud: zero risk isn’t the job. Jason Clinton
Ninety six percent of enterprises are running AI agents right now, in production, doing real work. Only twelve percent of them have a
Anthropic, Microsoft, Amazon, and Google agreed on something this week, and I honestly can’t remember the last time that sentence made sense to
Anthropic’s updated privacy policy took effect on July 8, and buried inside it is a line that should worry every managing partner whose
If your firm rolled out Microsoft 365 Copilot sometime in the last year and hasn’t touched the governance settings since, July was the
When navigating cloud business tools, there is a massive difference between an environment that is merely “functional” and one that is genuinely “defensible.”
Mid-way through 2026, the evaluation metric for securing corporate partnerships and lucrative municipal contracts has fundamentally shifted. There was a time when filling
Permissions, connectors, agents, and enterprise deployment decisions for Claude and Copilot.
Two critical PHP flaws, patched October 21, let an unauthenticated request run code on the server. Here’s why AI gateways built on PHP
TRAIGA, the Texas Responsible AI Governance Act, in plain English: who it covers, what it prohibits, enforcement, and what Texas businesses should do
Writing an AI acceptable use policy is the easy part. How to roll it out, train people, match it to real controls, and
Access controls, Microsoft 365 security, and practical steps to reduce exposure.
Two critical PHP flaws, patched October 21, let an unauthenticated request run code on the server. Here’s why AI gateways built on PHP
Copilot is safe for a law firm once permissions, sensitivity labels, and retention are in order. This guide gives you a seven item
What Business Premium, E3, and E5 include, which E5 features law firms use, and where Copilot needs more than the base plan. Buy
The free AI Readiness Snapshot identifies selected priorities in permissions, protection, visibility, and rollout readiness.