OpenAI
What functionality is supported by OpenAI as a subprocessor?
Summarize: Generates concise, high-level summaries of entire documents, helping users quickly grasp key points without needing to read lengthy or complex content.
Explain This: Allow users to highlight specific sections of text within a document and receive a clear, layman friendly explanation, making technical, legal, or financial terminology more accessible to all users.
Document Classification: Generates document type categories to quickly identify what is in a document and where it should go in the fileroom.
Folder Suggestions: Generates suggestion where a document could be placed in order to quickly organize documents within a fileroom.
How is customer data encrypted and protected during transit and at rest?
Data is encrypted in transit between Datasite and OpenAI (TLS 1.2+) and encrypted at rest (AES-256) in a logically separated environment.
What OpenAI LLM model does the functionality utilize?
Summary & Explain This
- v1 model: o3-mini
- v2 model (default): gpt4.1-nano
Document Classification
- v3 model: gpt-4o-mini
Folder Recommendations
- v1 model: o4-mini
Does OpenAI use customer data to train its models?
No, customer data is not used to train OpenAI models.
Does OpenAI retain customer data?
No, Datasite uses Zero Data Retention endpoints. Prompts and responses are not retained by OpenAI.
Are data residency requirements respected?
Yes, prompts and responses for customer projects in the Americas are processed in the US OpenAI and Datasite instance. Prompts and responses for customer projects in the EMEA, APAC and Australia are processed in the EU OpenAI and EU or Australia Datasite instances.
Will the functionality respect applied permissioning and redacted content?
Yes, redacted content will not be processed. Users will not be able to process content they have not been provisioned access to.
Does Datasite have a Data Processing Agreement in place with OpenAI?
Yes, Datasite has entered into written agreements with OpenAI that are no less protective than Datasite’s Data Protection Agreement.
Can the functionality be turned off?
Yes, all functionalities can be turned off on a project-by-project basis upon written request to the Client Services team from a designated Customer Administrator for that project.
Blueflame AI
What functionality is supported by Blueflame AI LLC (“Blueflame”) as a subprocessor?
Blueflame AI Enabled Content: a purpose-built AI assistant that enables Customers to ask natural-language questions and receive AI-generated answers grounded in the business information within the content.
How is customer data encrypted and protected during transit and at rest?
Data is encrypted in transit between Datasite and Blueflame (TLS 1.2+) and encrypted at rest (AES-256) in a logically separated environment.
What LLM providers and LLMs models does the functionality utilize?
OpenAI: GPT-4o, GPT-4.1, GPT-4.1-mini, GPT 5.4, text-embedding models
Anthropic: Claude Sonnet 4.5, Claude Haiku 4.5, Claude Opus 4.7
Google: Gemini 2.5 Pro, Gemini 2.5 Flash
Models are subject to change based on new version(s) and model release(s).
Does Blueflame or the LLM providers use customer data to train its models?
No, customer data is not used for training.
Does Blueflame or the LLM providers retain customer data?
No, Blueflame uses Zero Data Retention endpoints. Prompts and responses are not retained by LLM providers.
Blueflame retains customer data for the duration of the project. Upon project closure, customer data is permanently deleted.
Are data residency requirements respected?
Customer data for projects in the Americas are stored in the United States. Customer data for projects in the EMEA, APAC and Australia are stored in the EU. LLM server locations are also mirrored to respect data residency.
Does Datasite have a Data Processing Agreement in place with Blueflame?
Yes, Datasite has entered into Data Processing Agreement with Blueflame.
Can the functionality be turned off?
Yes, all functionalities can be turned off on a project-by-project basis upon written request to the Client Services team from a designated Customer Administrator for that project.