[Priya Shah]

A product may use customer prompts, records, or outputs to improve AI features. How can a buyer control that use?

[Jordan Blake]

Accepted answer

Define the exact permitted processing purpose and prohibit model training, product improvement, or third-party reuse unless the buyer expressly agrees to it. Cover prompts, uploaded records, metadata, outputs, retention, human review, subprocessors, deletion, security, and change notices. Require an off switch or non-AI path where needed. The NIST AI RMF and NIST Privacy Framework support explicit management of AI and privacy risk.

[Maya Chen]

Community reply

How should the clause handle aggregated usage data that the vendor claims cannot identify the buyer?

[Author]

Posts