GitHub is turning Copilot compliance from slideware into deployable policy: US and EU data residency now covers all generally available Copilot features, and US government deployments get FedRAMP Moderate infrastructure. The practical catch is cost, with data-resident requests priced at a 1.1x model multiplier.
GitHub has added US and EU data residency to Copilot and says its US government path now runs on FedRAMP Moderate-authorized hosts and infrastructure. The setting is admin-controlled, off by default, and carries a 10% premium-request surcharge for compliant endpoints.
Meta says it has moved AI into the core of its cross-company risk review program. The company argues that automation now helps prefill documentation, surface legal requirements, and flag privacy, safety, and security issues earlier in product development.
Vercel said AI Gateway can now enforce team-wide Zero Data Retention across model providers, extending compliance controls without code changes. The linked post says the feature routes only to ZDR-capable providers and pairs team-wide policy with request-level controls and prompt-training opt-outs.
Databricks posted on March 27, 2026 that its LogSentinel system uses LLMs to classify columns, apply hierarchical and residency-aware labels, and detect drift, with up to 92% precision and 95% recall for PII on 2,258 samples. Databricks documentation says Unity Catalog Data Classification uses an AI agent and LLM to classify and tag tables, while governed tags and ABAC policies translate those tags into consistent access and compliance controls.
Anthropic said on February 12, 2026 that Claude Enterprise can now be purchased directly from the Claude website. The launch keeps enterprise controls such as SSO, SCIM, audit logs, and a Compliance API while removing the need for an initial sales-led buying process.
The European Commission on March 5, 2026 published a second draft code of practice for marking and labelling AI-generated content. The draft gives providers and deployers a clearer path toward Article 50 AI Act transparency requirements ahead of the August 2, 2026 applicability date.
Anthropic announced new financial-services-focused Claude offerings on February 13, 2026. The launch includes KYC analysis, SEC/FINRA compliance workflows, and agentic branch operations, with early adopters including AIG, Commonwealth Bank of Australia, iA Financial Group, and Norges Bank Investment Management.
In a February 14, 2026 notice, OpenAI said Robinhood’s EU ‘OpenAI tokens’ are not OpenAI equity and were not issued through any OpenAI partnership. The company reiterated that any OpenAI equity transfer requires prior company approval.