A set of stairs with pillars

Data privacy, security, and compliance FAQs

What functionality is supported by OpenAI as a subprocessor?

Summarize: Generates concise, high-level summaries of entire documents, helping users quickly grasp key points without needing to read lengthy or complex content.

 

Explain This: Allow users to highlight specific sections of text within a document and receive a clear, layman friendly explanation, making technical, legal, or financial terminology more accessible to all users.

How is customer data encrypted and protected during transit and at rest?

Data is encrypted in transit between Datasite and OpenAI (TLS 1.2+) and encrypted at rest (AES-256) in a logically separated environment.

What OpenAI LLM model does the functionality utilize?

Currently, Datasite leverages OpenAI gpt4.1-nano for the functionality. This is subject to change based on new version(s) and model release(s).

Does OpenAI use customer data to train its models?

No, customer data is not used to train OpenAI models.

Does OpenAI retain customer data?

No, Datasite uses Zero Day Retention endpoints. Prompts and responses are not retained by OpenAI.

Are data residency requirements respected?

Yes, prompts and responses for customer projects in the Americas are processed in the US OpenAI and Datasite instance. Prompts and responses for customer projects in the EMEA, APAC and Australia are processed in the EU OpenAI and EU or Australia Datasite instances.  

Will the functionality respect applied permissioning and redacted content?

Yes, redacted content will not be processed. Users will not be able to process content they have not been provisioned access to.

Does Datasite have a Data Processing Agreement in place with OpenAI?

Yes, Datasite has entered into written agreements with OpenAI that are no less protective than Datasite’s Data Protection Agreement.

Can the functionality be turned off?

Yes, both Explain This and Summarize can be turned off on a project-by-project basis upon written request to the Client Services team from a designated Customer Administrator for that project.