MSA-level clientConditionalConditionalConditionalConditionalCheck firstCheck firstCheck firstCheck firstCheck firstNot permitted
Novartis
Controlled — Prior Written Consent Required
Novartis requires prior written consent — not just disclosure — before any AI-created work reaches them, and they want to know how the AI was built and what risks it carries before they'll approve it. Adobe Firefly is the one tool they've named as compliant by default.
Key requirement — Get Novartis's written consent before delivering anything AI-created — build a consent library for recurring use cases so you're not negotiating from scratch each time. Adobe Firefly is named as already compliant; every other tool needs its own sign-off.
Permitted
- Internal efficiency tasks with prior consent
- Adobe Firefly, named as compliant by default
- Consented use cases — ideation, research, drafting
Not permitted
- Any AI-created work delivered without prior written consent from Novartis
- Client-facing AI content without approval
- Consumer or standard-tier AI tools
Tool-by-tool approval
LynxAI
Prior written consent required
AVA
Prior written consent required
Microsoft Copilot
Prior written consent required
NotebookLM
Prior written consent required
Vermeer
Prior consent required
Vurvey
Prior consent required
ElevenLabs
Prior consent required
HeyGen
Prior consent required
Runway
Prior consent required
Consumer AI
Not approved for client use
