Field notes
“Where does my data go?” The first question, at every meeting
· By Diane du Paty, CEO & co-founder · 1 min read
In a first meeting, the question is almost never about the AI. It is about the data: where it goes, who can access it, what is done with it. Why we went after ISO 27001 certification, and what I advise any brokerage evaluating an AI tool this year.
In a first meeting, the question is almost never about the AI.
It is: “Where does my data actually go?”
It is the right question. A broker handles ID documents, company filings, claims histories, financial statements. They are accountable for that data: to their clients, to the regulator, to the data protection authority. Adding a tool to their workflow means adding a link to their chain of responsibility.
Why ISO 27001
That is why we went after ISO 27001. Panora is now certified. What it means for a firm working with us:
- hosted in France, GDPR applied end to end;
- your data is never used to train our models, or anyone else’s;
- access control, encryption and traceability audited every year by a third party;
- human validation on every action: the AI prepares, the broker decides.
This is not a sales argument. It is a prerequisite. A firm that puts its client relationships through a tool needs to be able to prove, to its carriers and to its regulator, that the question was taken seriously.
What I advise
If you are evaluating AI tools this quarter: ask for the certifications before you ask for the demos. It narrows the field fast.
And ask the questions in this order. Where is the data hosted, and in which country? Who at the vendor can access it? Is it used to train a model? Is every action tied to a person? What happens if we leave?
A serious vendor has these answers in writing. We put ours on our website, and we send the documents on request to security@panora.co.
