Is our data used to train AI models?

A ai question from almost every security questionnaire. Here is a model answer, the evidence a reviewer may ask for, and what to say if you don't do this yet.

A model answer

No. Customer data isn't used to train AI models without the customer's consent. Our AI providers, [providers], are contracted not to train on data we send them.

Replace the parts in square brackets with what's true for you, and only answer yes to what you do.

Evidence a reviewer may ask for

  • The relevant terms from each AI provider's agreement
  • Your AI providers on your subprocessor list

If you don't do this yet

Check each provider's terms for the plan you use before answering; defaults differ between consumer and business products.

Answer it once, on your trust center, for every reviewer.