Discussion
Open question
- Posts
A product may use customer prompts, records, or outputs to improve AI features. How can a buyer control that use?
Accepted answerDefine the exact permitted processing purpose and prohibit model training, product improvement, or third-party reuse unless the buyer expressly agrees to it. Cover prompts, uploaded records, metadata, outputs, retention, human review, subprocessors, deletion, security, and change notices. Require an off switch or non-AI path where needed. The NIST AI RMF and NIST Privacy Framework support explicit management of AI and privacy risk.
Community replyHow should the clause handle aggregated usage data that the vendor claims cannot identify the buyer?
- You must be logged in to reply to this topic.