Australia → United States → potentially undisclosed downstream client
Machine Learning & AI Australia (community);
Parsewave LLC (potential acquirer);
Anthropic (named intended buyer);
undisclosed downstream client (alternative stated acquirer)
--------------------------------
29-08-2026 — Solicitation identified
-
Former president and co-founder of Machine Learning & AI Australia
solicited members of the Australian professional community for
enterprise technical documentation.
-
Requested material included architecture/design documentation,
runbooks, specifications and troubleshooting material.
-
Solicitation explicitly stated that the individual was
"selling data rn to Anthropic."
--------------------------------
31-08-2026 — Anthropic notified
-
Concern reported through Anthropic Legal, DPO and Support channels.
-
Privacy address attempted but message was returned as undeliverable.
-
Full exchange retained and offered to Anthropic.
--------------------------------
Subsequent acquisition information
-
Acquiring entity stated to be either Parsewave LLC or the downstream client.
-
Parsewave LLC is a United States-based entity while the solicitation
targeted an Australian professional community.
-
Documents were described as company-owned rather than the intellectual
property of the individual supplying them.
-
Material is intended to be supplied downstream with
"essentially unlimited rights."
-
Ownership verification was described as generally purchasing from
individuals able to demonstrate that they founded a company or produce
a bill of sale.
-
This explanation did not establish how an individual supplier is
authorised by the corporate rights-holder to license company-owned
material with broad downstream rights.
-
The individual subsequently stated that a source for the requested
documentation had been identified.
-
When asked to identify the acquiring entity, the downstream client
was stated to be confidential despite Anthropic having been expressly
named in the original solicitation.
--------------------------------
03-09-2026 — Direct ANZ escalation
-
No acknowledgement received from Anthropic through the previously
contacted channels as at 03-09-2026.
-
Matter escalated directly to Anthropic ANZ leadership for internal routing.
Risk Tiers
| Risk Category |
Tier |
| Data Provenance & Licensing Authority |
CRITICAL
|
| Enterprise Confidentiality & Information Security |
CRITICAL
|
| Third-Party / Vendor Governance |
CRITICAL
|
| IP / Contractual Authority |
CRITICAL
|
| Cyber / Supply-Chain Security |
HIGH
|
| Cross-Border Data Governance |
HIGH
|
| Privacy & Data Protection |
HIGH / CONDITIONAL
|
| Governance & Assurance Alignment |
HIGH
|
Australian Regulatory / Governance Frameworks
-
Privacy Act 1988 (Cth) — where acquired material contains personal information.
-
Australian Privacy Principle 6 — use or disclosure of personal information.
-
Australian Privacy Principle 8 — cross-border disclosure of personal
information to overseas recipients.
-
Australian Privacy Principle 11 — security of personal information.
-
Notifiable Data Breaches scheme — where the statutory criteria for an
eligible data breach are met.
-
ASD Information Security Manual — information-security,
procurement and supply-chain risk management benchmark.
Cross-Border Considerations
-
Solicitation occurred within an Australian professional community.
-
Parsewave LLC, one stated potential acquiring entity, is based in the
United States.
-
A separate downstream client was also identified as a potential
acquiring entity but was not disclosed.
-
Where Australian personal information is disclosed to an overseas
recipient by an APP entity, APP 8 may impose cross-border handling
obligations and accountability requirements.
-
Additional US or other jurisdictional privacy/data-protection
obligations depend on the content of the acquired material,
entities involved, data subjects and subsequent processing.
Anthropic Assurance / Governance Signals
- ISO/IEC 27001 — Information Security Management
- ISO/IEC 42001 — Artificial Intelligence Management System
- SOC 2 Type II
- CSA STAR
-
Anthropic publicly states that due diligence is undertaken on
commercially licensed training data.
-
Anthropic's published vendor governance materials establish
expectations concerning legal/regulatory compliance,
responsible sourcing and data protection/privacy.
Implication:
The documented solicitation raises material questions concerning
provenance, corporate authority to license enterprise-origin material,
confidentiality, third-party acquisition controls and downstream rights.
The involvement of an Australian source community, a US-based potential
acquirer and an undisclosed downstream client additionally creates
cross-border governance considerations. Privacy-law exposure remains
conditional on whether personal information is contained in, or derived
from, the acquired material and how that information is subsequently
disclosed or processed.