AI Impact · Governance

Approved tools and data classes. Which tool for which data.

For the secure handling of confidentiality, this table shows which AI tools are approved for each data class. Exceptions in projects must be approved by the customer or the CISO.

Last decision 24.07.2026 Adopted via IDM · no objections Owner AI Impact group Source migrated from SharePoint
The matrix

Tools & data classes

Approval applies to the paid business plans only — never free or personal accounts.

1 Copilot Work vs Web

Copilot Web (public, multi-tenant) may process inputs outside the tenant. Copilot for Microsoft 365 ("Work") runs inside the tenant and meets enterprise compliance (DSG/GDPR, ISO 27001).

2 Secrets exclusion

Biometric data, passwords, personal access tokens and other authentication information must never go into any LLM. Vault (vault.unic.com) is intended for this. Applies to Copilot Work, Claude and Rovo.

3 Figma AI condition

Only on an Organization/Enterprise plan with a DPA, "Content training" switched off (confirmed), and limited to design content.

Governance. Tools and approvals are reviewed regularly by the AI Impact group. In the event of an incident, report it immediately in Jira.  ·  Plans. Claude Team · Atlassian Rovo (Enterprise) · Figma Org/Enterprise.  ·  Data transfer. Atlassian and Figma are certified under the (Swiss-)US Data Privacy Framework (Art. 45 GDPR); Anthropic relies on SCCs (Art. 46), with the DPF as a secondary basis.  ·  Rovo training. AI-training opt-out completed and documented for content and metadata, including zero retention.