Zero data retention commitments? Technically generating synthetic data off of user data on the fly, counts as zero retention of user data! And it technically means they didn't lie either, because they didn't keep user data, they kept their own, synthetic data. That is what they already do with reasoning when they provide summaries/sanitized versions of it to prevent "distillation attacks" even via the API. They generate synthetic data aka summaries of reasoning traces, and that is technically not user data, because the user did not enter it directly into the LLM! It still counts as zero data retention when they only keep original LLM created reasoning traces as well as all LLM outpit, because the user did not enter it, so it counts as synthetic data and is thus not user data.
This is flatly false. ZDR means the customer request is processed and nothing about its content remains on the model provider's servers.
LLM generated content is not the user's, it's the company's, licensed to the user under ToS, not copyright. Even more so with the raw proprietary reasoning traces, which most users never see and are only available as summaries created via a secondary LLM, or sometimes not at all. So the proprietary reasoning trace can never belong to the user due to ToS and the user never seeing it.
Many companies don't believe ZDR is real, so they log LLM conversations and tell employees to never share sensitive data with an LLM in the first place. This openai incident might justify it.
You are, again, flatly wrong about this. ZDR involves infrastructure separation that prevents any data flowing back.
That implies running a model on a third party cloud like azure or AWS or local models. All this comes at a premium. Do you know of any companies doing this? Most companies I have seen don't due to cost and simply log conversations and tell employees not to share sensitive data with an LLM. They don't trust ZDR
Looks like you believe companies trust ZDR. Only a bot would lose this kind of nuance. Looks like you only read my first paragraph. Also they give no ai to people who do not see programming source code. Or if they do it is monitored to hell and back
I've worked for three different companies that all use some mix of enterprise agreements, self-hosting, and AWS Bedrock to ensure that proprietary data doesn't get trained on. It's not a difficult or complicated problem.