The company ought to make procedures for categorizing and classifying all data, it doesn't matter exactly where it resides. Policies are necessary to make certain correct protections are in place whilst the data is at https://aistudio.ml