Privacy Compliance
Verify data ownership permissions to establish a solid compliance and security baseline.
Filter Questions
Only one selection per filter category; filters from different categories can be combined. Filter criteria are reflected in the URL for easy access and sharing.
Loading Q&A · Sort by publish date
Return all questionsBefore connecting to AI, which business data cannot be uploaded to the platform?
Avoid uploading sensitive data such as ID cards, transaction records, or medical records. If required, ensure all information is properly redacted.
Does using third-party AI risk violating customer privacy?
Public cloud carries higher risk. Prioritize private deployment for sensitive workloads and enforce strict access control.
Will employee-submitted internal data be used to train models when input via AI?
Public cloud services may collect data by default; ensure your agreement explicitly prohibits using our data to train models.
How do I trace who called, uploaded, or exported sensitive content?
Enable full-link audit logging to retain account, timestamp, and action details for internal compliance audits.
Are there copyright and compliance risks when using AI-generated materials for external use?
Model-generated content may not be free of infringement. Critical external documents must undergo manual review.
How to prevent internal staff from maliciously crafting prompts to bypass risk controls?
Enable input filtering to restrict high-risk queries and establish AI usage management guidelines.
If public cloud is selected, will the data be stored on servers located outside the country?
Confirm storage region in advance. As this involves critical data, automatic cross-border storage is strictly prohibited.
Will the vendor retain our data after we discontinue this AI product?
The contract must explicitly state that all data must be deleted within a specified period after termination, and deletion proof must be provided.