Claude Has Three Powers #169b
The dangerous setup every leader must understand before connecting work data.
We are honored to count you among the >600.000 readers of “DIGITAL STORM weekly”. Please help grow our community by inviting your friends.
Executive Intelligence
The Rule of Two: an operating manual for AI you can actually trust
Your exposure is now set by architecture, not effort. The plan decides whether your work trains a model. The powers you grant decide whether your data can be stolen. Both are design choices, and both have a correct setting. Here is the full system.
Executive Summary
In 2026 the question is no longer whether AI is safe to use. It is which two of three dangerous powers you let any one assistant hold, and which plan you let your work live on.
Three shifts define the moment. First, the consumer default inverted. Since late August 2025, conversations on Claude’s Free, Pro, and Max plans train future models unless the user opts out, with retention stretched to as long as five years. The business tiers were untouched. The plan, not the discipline, now sets the baseline.
Second, the defence moved from detection to design. The class of attack behind almost every AI data theft, indirect prompt injection, has no reliable filter, and the teams building these systems now say so openly. The practical response is structural: an assistant should hold no more than two of three powers at once. Read your data, take in outside content, reach out to communicate. Pick two.
Third, this became an organisational problem. Personal AI use is now widespread inside companies and largely invisible to the people accountable for data. When work runs on a personal account, the company’s data quietly falls under consumer terms instead of the contract meant to protect it.
Who is most affected: anyone handling client, patient, financial, or proprietary data through a personal account, and any leader responsible for a team that does. The move this week: turn off training, score every assistant against the three powers, and give the work that needs all three a place to run under the right terms. The rest of this issue makes each of those a repeatable system.
01 · FULL BREAKDOWN
The four moving parts
Four developments, none of them an isolated headline, combine into the situation you are managing. Take them in order.
