Check whether service data can become training data.
A broad improvement right may authorize more than delivering the service.
The question to ask
Find every data-use permission, including analytics, improvement, de-identification, sharing, and AI training. Separate customer content from telemetry and compare the DPA with the main agreement.
Illustrative clause — not a court case
Hypothetical wording: Vendor may use Customer Data to improve any products and models. Determine whether that includes retained prompts, contract text, or disclosure to another provider.
Source and legal limits
The commercial vendor-review checklist treats data-for-training permissions as a potential configured deal-breaker. It does not make training automatically unlawful or prohibited in every contract. Applicable privacy and confidentiality duties need separate analysis.
What can go wrong
An NDA or deletion promise may conflict with an improvement license. De-identification claims can be unclear about the method and ongoing use. A customer may not have the rights needed to authorize use of third-party content.
A focused negotiation
State the intended permitted purpose, whether training requires separate opt-in, the retention period, and provider obligations. Trace exceptions and order of precedence. Ask for missing incorporated terms before calling the data analysis complete.
Sources and scope
Anthropic commercial-legal vendor-agreement-review checklist (pinned reference)
Review method, not a statement of applicable law; draft positions require attorney review.
Put the checklist to work.
Choose a role and review the exact outbound text before requesting analysis. Live analysis is limited to eligible invited accounts; model and legal acceptance remain pending.
Open the review workspace Explore a local sample