shared.image.missing_image
ROMAN BODNARCHUK · FOUNDER, WISDOMTWIN.AI · 12 AUG 2026 · 5 MIN READ
DATA CUSTODY
+ the retention question almost nobody asks their vendor, and the answer that should worry them
Ask your AI vendor one question. Not whether they train on your data. Whether they can technically read it.
Those are different questions and the second one is the one that matters.
Retention is not the same as access
Most vendor conversations stop at retention. We do not store your prompts. We do not train on your data. Both can be true while the data is still readable in transit and in memory during processing.
Custody asks a harder question. During the seconds your data is being processed, who could technically observe it, and what would compel them to.
The three answers you should get in writing
Where inference physically executes. Which subprocessors are in the path. What telemetry and metadata persists after the content is discarded.
Vendors who can answer all three quickly are usually the ones who designed for it. Vendors who need a week are telling you something.
What sensitive work actually requires
For patient records, privileged legal work and controlled government data, the defensible position is not a strong contract. It is an architecture where the question does not arise.
If the data never leaves your infrastructure, custody is not a matter of trust. It is a matter of physics.
EXECUTIVE NOTE
Custody is not a contract clause. It is a network path.
Control signals
Two questions do you train on it, and can you read it. Only the second one matters.
Three answers execution location, subprocessor list, and metadata retention.
Zero ambiguity when the data never leaves your infrastructure.
The enterprise move: move custody from contract to architecture
Ask the access question in writing. Not the training question. The access question.
Get the subprocessor list with a change-notification clause. The list on signing day is not the list today.
Move the most sensitive workflow behind your own perimeter. Start with the one you would least want to explain in a breach notification.
WisdomTwin.ai Turn your executives' judgment into private, governed agents.
N5R.ai Build local, on-device AI agents. NemoClaw for Windows. Hermes for Mac.
Book 20 minutes: calendly.com/romanbodnarchuk
P.S. The strongest data processing agreement in the world is still a promise. Architecture is not.