Copilot in the sandbox, Claude at the open gate: AI tools in software development for the pharmaceutical industry

Every now and then, we notice that companies strictly restrict access to Microsoft Copilot—while at the same time recommending GitLab Duo, with its integrated LLMs, for unrestricted use in code development. This asymmetry affects confidentiality agreements with API providers, GxP sub-processor qualification, and the question of who actually controls what is shared externally. We debunk the myth that “AI learns everything” – and reveal where the real risks lie. And: What would a responsible approach to using these tools look like without exposing oneself to legal and regulatory vulnerabilities?