"Is this data safe?" is the wrong first question

Every team we sit down with asks some version of the same thing: if we put our financial stuff into Claude, is it going to end up on the internet? That's a real worry, and it deserves a real answer, not a blanket 'it's totally safe.' The honest comparison: if you'd trust putting that information in an email, you can trust putting it into your organisation's Claude plan. It's not a guarantee, it's a comparison to a risk you've already accepted. The actual rules, what goes in and what doesn't, belong in a written policy, not a slogan.