Ask the right data-retention questions
Model compatibility is only one part of vendor selection. Use this checklist to review prompts, responses, logs, support access, provider routing, and deletion expectations before a production rollout.
Questions for your review
- Are prompts and responses stored, for how long, and for what operational purpose?
- Which logs contain request IDs, token counts, errors, or metadata?
- How are provider channels selected, and what data leaves the gateway?
- What are deletion, export, account closure, and support-access procedures?
Reduce exposure in your application
Minimize personal data, redact secrets before requests, set retention at your own systems deliberately, and avoid putting API keys or private prompts into client-side analytics. Review the security overview alongside your organization policy.
Confirm current terms
Policies can change. Read the current privacy policy and service terms, ask specific questions before purchase, and record the answer with the date and product version.
Frequently asked questions
Is this a legal guarantee?
No. It is an engineering review checklist, not legal advice. Use the current contractual terms and your own counsel for regulated data.
Can I send sensitive production data?
Only after your data classification, contractual requirements, and the current retention and provider-routing terms have been reviewed.
Where do I find updates?
Check the current privacy and terms pages, service status, and authenticated support channels.