AI vendors and your data

146 vendors · 427 answers

DigitalOcean AI Data Privacy changed DigitalOcean, Oct 19, 2026

DigitalOcean · Oct 19, 2026 · 18 added, 1 removed · seen by the weekly check

After this change the quoted clause for retention is no longer on the page. The answer is flagged until a person re-reads it.

  1. Added: We do not store model inputs or outputs on DigitalOcean infrastructure, except for conversation data that DigitalOcean Signals collects after you enable it. For details, see DigitalOcean Signals .
  2. Removed: We do not store inputs or outputs on DigitalOcean infrastructure for any models.
  3. Added: Trace : A record of an agent or inference interaction, which may include End User prompts and inputs, agent calls to tools and databases and their parameters, retrieved data, intermediate steps, model responses, and associated metadata such as timestamps, identifiers, latency, cost, and error states.
  4. Added: Session : A set of Traces grouped as a single End User interaction or conversation.
  5. Added: Signal : A derived attribute, label, score, or classification produced by applying logic or models to Traces or Sessions.
  6. Added: End User : An individual or system whose interactions with your agent generate Traces. End Users are your users, not DigitalOcean's.
  7. Added: When you consent to Signals for Harness Runtime agent or for Serverless Inference, or use it with Simulations or Evaluations, we process the Trace content generated, including the text of End User prompts and inputs, tool and database calls and their parameters, retrieved content, model responses, and reasoning or intermediate steps; the Session groupings and metadata associated with those Traces; and the Signals we derive from them. We also process Usage Data about your use of the feature.
  8. Added: A note about personal data. Trace content is processed in raw form and may contain personal data, or special-category or sensitive data, if that data is present in the underlying agent or inference interactions. You determine what your models, agents, and End Users submit.
  9. Added: We use Trace content and Signals only to provide Signals to you and support it: to group Traces into Sessions and annotate Signals; to make Sessions and Signals available to you through dashboards, filtering, and search; to enable you to reuse qualifying Traces for your own purposes, such as with Evaluations and Simulations; to detect behavioral and operational issues in your agentic and inference workflows; and to operate, secure, troubleshoot, and improve the feature for you. We may use anonymized, aggregated Usage Data to improve the Service.
  10. Added: DigitalOcean does not use your Trace content, Signals, inference inputs and outputs, agent inputs, or agent outputs to train, fine-tune, or improve any generalized artificial-intelligence or machine-learning model, including any foundation model offered to other customers. We process that data only to provide Signals to you or as required by law.
  11. Added: Signals may capture responses from the models your agents call. Those models are operated under their own data-use and retention practices. For models made available through DigitalOcean's inference infrastructure, provider-specific data-use and retention details, including any zero-data-retention arrangements or mandatory retention periods, are described in the DigitalOcean Serverless Inference data privacy documentation . For Third-Party Models you connect directly, those practices are governed by your relationship with that provider, not by DigitalOcean.
  12. Added: We do not combine your Trace content with other customers' data, and we do not use your Trace content or Signals to develop products for, or to benefit, other customers. Signals are scoped to your account.
  13. Added: DigitalOcean applies automated redaction that is designed to detect and replace common categories of sensitive data before content is shown to you in the Console. The categories we aim to detect include personal identifiers such as names, contact details, locations, and dates; government and national identifiers and documents; financial data such as payment card and bank account numbers; medical and clinical terms; network identifiers; and credentials and secrets such as API keys, access tokens, passwords, private keys, and database credentials. Detected items are replaced with typed placeholders.
  14. Added: Automated redaction is a safeguard, not a guarantee. It is not infallible and may not detect every item, particularly in languages or formats it does not fully support. It does not change your responsibilities for the data your models, agents, and End Users submit, and it does not by itself satisfy your obligations under HIPAA, PCI-DSS, or other industry-specific regulations. You remain responsible for determining whether Signals is appropriate for your data and regulatory environment.
  15. Added: As between you and DigitalOcean, you retain all rights in your Trace content. For Harness Runtime, you can enable or disable Signals through the DigitalOcean Control Panel, CLI, or API. For Serverless Inference, you can enable or disable Signals through the API. Disabling Signals stops further Trace capture for that agent or model. You may request deletion of collected data through the Signals data deletion API.
  16. Added: For personal data contained in Trace content, you are the Controller and determine the purposes and means of processing your End Users' data, and DigitalOcean is the Processor, processing Trace data to deliver Signals and on your instruction to enable the feature data.
  17. Added: Trace content and Signals are processed and stored in a DigitalOcean United States data center region. Signals does not offer regional data storage or data localization at this time.
  18. Added: Traces collected for Signals are retained in accordance with DigitalOcean's standard retention practices and the applicable documentation. You may request deletion of collected data through the Signals data deletion API. For how the models your agents call process and retain the data you route to them, see the DigitalOcean Serverless Inference data privacy documentation .
  19. Added: Signals is designed to surface the most informative Sessions rather than store all raw traffic, which reduces the volume of Trace data retained.
About this change
Page
docs.digitalocean.com/products/gradient-ai-platform/details/data-privacy/
Kind
Documentation
Text hash
639621eb1468 to b2b73d4dc0a6
Dated by
the weekly check that first read the new text