{"version":1,"type":"story","url":"https://digestai.news/story/openai-docs-clarify-limits-of-zero-data-retention-and-privacy-promises","json":"https://digestai.news/story/openai-docs-clarify-limits-of-zero-data-retention-and-privacy-promises.json","markdown":"https://digestai.news/story/openai-docs-clarify-limits-of-zero-data-retention-and-privacy-promises.md","slug":"openai-docs-clarify-limits-of-zero-data-retention-and-privacy-promises","headline":"OpenAI docs clarify limits of zero data retention and privacy promises","summary":"A detailed analysis of OpenAI's official documentation reveals that its \"Zero Data Retention\" (ZDR) and \"employees cannot view\" promises are distinct and limited. ZDR applies only to specific API workflows and requires prior approval from OpenAI; it is not a default setting. In standard configurations, abuse monitoring logs are retained for up to 30 days, though this period may extend if legally required or necessary for safety.\n\nThe analysis highlights five key exceptions where data may still be retained even with ZDR enabled. These include unsupported features like Assistants and Vector Stores, which are kept indefinitely unless manually deleted. Images and files are scanned by a classifier, and any suspected child sexual abuse material is retained for human review regardless of ZDR settings. Additionally, data sent to external tools via the Model Context Protocol follows the third-party's retention policies, and prompt caching stores encrypted data in GPU memory for 24 hours.\n\nSeparately, Private Safety Processing (PSP) stores safety review records in customer-controlled storage for 30 days using double encryption. The author notes that while OpenAI states employees cannot view these specific PSP records, this design is separate from the general ZDR policy. The article advises enterprise users to verify these specific conditions in writing before inputting confidential data, as the documentation contains omissions and conditional clauses that limit the scope of privacy guarantees.","keyPoints":["Zero Data Retention requires prior OpenAI approval and applies only to specific API workflows, not all products.","Suspected child sexual abuse images are retained for human review even when Zero Data Retention is enabled.","Private Safety Processing records are stored in customer storage for 30 days with double encryption."],"whyItMatters":"Enterprises relying on AI for confidential data must understand that \"no retention\" is not absolute. Specific exceptions for safety reviews, unsupported features, and external tools mean data may still be stored or accessed, requiring careful contract verification.","category":{"slug":"policy","name":"Policy & Regulation","url":"https://digestai.news/category/policy"},"entities":{"companies":["OpenAI","Oracle Cloud Infrastructure"],"models":[],"people":[]},"firstPublishedAt":"2026-11-01T16:49:00Z","updatedAt":"2026-11-01T16:49:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"note.com","title":"What OpenAI's 'No Data Retention' and 'Employees Cannot View' Promises and Omissions Mean in Official Documentation: Points to Verify Before Inputting Confidential Data into AI","url":"https://note.com/consuloji_ch/n/nf0e445a1aab8?hl=en","publishedAt":"2026-11-01T16:49:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":null,"cite":{"text":"Digest AI, \"OpenAI docs clarify limits of zero data retention and privacy promises\", 1 November 2026, https://digestai.news/story/openai-docs-clarify-limits-of-zero-data-retention-and-privacy-promises","publisher":"Digest AI","title":"OpenAI docs clarify limits of zero data retention and privacy promises","datePublished":"2026-11-01T16:49:00Z","url":"https://digestai.news/story/openai-docs-clarify-limits-of-zero-data-retention-and-privacy-promises"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}