AI vendors and your data

146 vendors · 427 answers

Data Processing Agreement changed Sail Research, Oct 5, 2026

Sail Research · Oct 5, 2026 · 3 added, 5 removed · seen by the weekly check

After this change the quoted clause for retention is no longer on the page. The answer is flagged until a person re-reads it.

  1. Added: Ephemeral In-Memory Processing. All prompts submitted to and outputs generated by the inference Services are Processed only ephemerally in memory, for the minimum duration necessary to fulfill each request and return its output. Sail and its Subprocessors do not persistently store these prompts or outputs or retain them beyond that duration.
  2. Removed: Persistent Storage. Customer Data is stored only temporarily in Amazon S3 buckets (unless Customer chooses to use Customer-owned S3 buckets).
  3. Removed: Transient Processing. All other Processing is transient in-memory only for the duration of the job.
  4. Removed: Automatic Deletion. Sail's production S3 buckets are configured with an automated deletion rule (implemented via S3 bucket lifecycle policy) that deletes Customer Data shortly after Processing. Precise deletion timing can vary in practice due to job retries, failures, or other operational conditions. Sail will not retain Customer Data for longer than 48 hours, except to the extent (a) required by Data Protection Laws or other applicable legal or regulatory requirements, (b) necessary to resolve a dispute between the parties, or (c) such Customer Personal Data is retained in accordance with Sail's or its Subprocessors' standard policies and procedures.
  5. Added: Customer Personal Data contained in inference prompts and outputs is Processed only for the minimum duration necessary to fulfill each request and return its output, as set out in Section 8.
  6. Added: For International Data Transfer to (Sub)Processors, also specify subject matter, nature and duration of the Processing: For the subject matter and nature of the Processing, reference is made to the Agreement and DPA. The Processing of Customer Personal Data contained in inference prompts and outputs is subject to the restrictions in Section 8, including its duration limit.
  7. Removed: The period for which personal data will be retained, or, if that is not possible, the criteria used to determine that period: Customer Personal Data will be retained for as long as necessary taking into account the purpose of the Processing, and in compliance with applicable laws, including laws on the statute of limitations and Data Protection Law.
  8. Removed: For International Data Transfer to (Sub)Processors, also specify subject matter, nature and duration of the Processing: For the subject matter and nature of the Processing, reference is made to the Agreement and DPA. The Processing will take place for the duration of the Agreement.
About this change
Page
docs.sailresearch.com/dpa
Kind
Data processing addendum
Text hash
32055a8bf29c to 06187cb95e94
Dated by
the weekly check that first read the new text