# OpenAI docs clarify limits of zero data retention and privacy promises

Digest AI · Policy & Regulation · published 2026-11-01T16:49:00Z

Canonical: https://digestai.news/story/openai-docs-clarify-limits-of-zero-data-retention-and-privacy-promises

## Summary

A detailed analysis of OpenAI's official documentation reveals that its "Zero Data Retention" (ZDR) and "employees cannot view" promises are distinct and limited. ZDR applies only to specific API workflows and requires prior approval from OpenAI; it is not a default setting. In standard configurations, abuse monitoring logs are retained for up to 30 days, though this period may extend if legally required or necessary for safety.

The analysis highlights five key exceptions where data may still be retained even with ZDR enabled. These include unsupported features like Assistants and Vector Stores, which are kept indefinitely unless manually deleted. Images and files are scanned by a classifier, and any suspected child sexual abuse material is retained for human review regardless of ZDR settings. Additionally, data sent to external tools via the Model Context Protocol follows the third-party's retention policies, and prompt caching stores encrypted data in GPU memory for 24 hours.

Separately, Private Safety Processing (PSP) stores safety review records in customer-controlled storage for 30 days using double encryption. The author notes that while OpenAI states employees cannot view these specific PSP records, this design is separate from the general ZDR policy. The article advises enterprise users to verify these specific conditions in writing before inputting confidential data, as the documentation contains omissions and conditional clauses that limit the scope of privacy guarantees.

## Key points

- Zero Data Retention requires prior OpenAI approval and applies only to specific API workflows, not all products.
- Suspected child sexual abuse images are retained for human review even when Zero Data Retention is enabled.
- Private Safety Processing records are stored in customer storage for 30 days with double encryption.

## Why it matters

Enterprises relying on AI for confidential data must understand that "no retention" is not absolute. Specific exceptions for safety reviews, unsupported features, and external tools mean data may still be stored or accessed, requiring careful contract verification.

## Sources

1. [What OpenAI's 'No Data Retention' and 'Employees Cannot View' Promises and Omissions Mean in Official Documentation: Points to Verify Before Inputting Confidential Data into AI](https://note.com/consuloji_ch/n/nf0e445a1aab8?hl=en) (note.com, 2026-11-01)

## Cite

Digest AI, "OpenAI docs clarify limits of zero data retention and privacy promises", 1 November 2026, https://digestai.news/story/openai-docs-clarify-limits-of-zero-data-retention-and-privacy-promises

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/openai-docs-clarify-limits-of-zero-data-retention-and-privacy-promises.json