AI Advisory

Nevada Federal Court Bars Uploading Discovery Into Public AI Tools 

Read the filing for Stansfield v. IBM. The order includes an explicit AI restriction against uploading to publicly available AI tools.
JetStream Security
Legal Brief

The filing

Stansfield v. IBM, U.S. District Court, District of Nevada, stipulated protective order entered April 16, 2026. 

What happened

A Nevada federal court approved a stipulated protective order in an employment dispute between Darin Stansfield and IBM. The order includes an explicit AI restriction: parties receiving confidential discovery materials may not upload them to publicly available generative AI tools such as ChatGPT unless those platforms can be configured to prevent the producing party’s data from being used for model training. Any AI-assisted litigation support must use secure, private tools only. 

Why it matters

Courts are beginning to codify AI data restrictions directly into discovery, creating real demand for enterprise AI tools that can prove confidential data never trains a public model. 

JetStream’s take

When a protective order names generative AI directly, AI governance stops being a policy question and becomes a discoverable, court-enforceable obligation. 

Source

Stansfield v. IBM – Protective Order (D. Nev.) by chelsea.stark.ctr

Stay ahead with our newsletter

Stay informed on industry trends, expert analysis, and product updates.

Explore more insights

See all Insights
Why MCP Matters More Than You Think
AI Advisory
Oct 5, 2026
Why MCP Matters More Than You Think
The protocol is where agents stop talking and start acting.
Who Owns It: Agentic Identity and the Accountable Owner 
AI Advisory
Sep 18, 2026
Who Owns It: Agentic Identity and the Accountable Owner 
If an action cannot resolve to a name, it is not evidence. How to name the four identities in every agentic workflow and assign one accountable owner.
Proving It Continuously: Evidence, Drift, and Audit-Readiness
AI Advisory
Sep 14, 2026
Proving It Continuously: Evidence, Drift, and Audit-Readiness
Attestation is not evidence. The standards ask you to show that a control operated, and runtime is where you either can or cannot.