Harvey
Data Privacy OfficerAppliedAug 14, 2026

Raise sensitive-upload classification before first use

Sensitive information is often easiest to protect before it becomes useful to a workflow.

Early controls can compete with the speed lawyers expect when a matter is moving quickly.

We can’t find out after the fact that a sensitive employee file took the ordinary path.

Bao Sun · Corporate Privacy Counsel

Oversees use of a legal AI workspace for investigations and regulatory response materials.

What pulls against what

  • early safeguards vs. urgent legal access
  • classification precision vs. intake speed
  • consistent metadata vs. surface-specific workflows

What is at stake

Late identification leaves sensitive material outside intended handling controls. Better coverage protects customers without turning urgent legal intake into a bottleneck

Why Harvey

At Harvey, this may matter because customer documents can move quickly from intake into legal analysis and drafting.

Written for

Privacy-by-design practitionerSensitive-data governance specialistLegal technology privacy lead

This is the setup. The work is inside.

Running it puts you in the room: the full situation and its constraints, stakeholders who push back in their own words, and the decisions that are yours to make. What you produce becomes a Day One Plan — work you can show someone instead of describing.