Termsby GlyphData, privacy, and security for Models sold by Azure changed Microsoft, Nov 9, 2026
Microsoft · Nov 9, 2026 · 3 added, 0 removed · seen by the weekly check
- Added: For direct Responses API calls that persist message history and related content, the service manages the storage used for that content. The Responses API doesn't currently support bring-your-own-data storage for this service-managed state. This storage differs from storage configurations available through Foundry Agent Service.
- Added: Content that the Responses API stores in Azure Cosmos DB or Azure Blob Storage is encrypted at rest. When customer-managed key encryption is configured for the resource and applies to that content, the service uses the resource's customer-managed encryption-key data-encryption key to encrypt it. When the Responses API loads the content from storage, it uses the corresponding data-encryption key to decrypt it. By default, persisted customer data is protected using Microsoft-managed keys.
- Added: This section describes service-managed Responses API storage . It doesn't describe how an application protects data it retains itself, including encrypted reasoning items returned for stateless requests. For CMK prerequisites and coverage, see Customer-managed key encryption in Microsoft Foundry .
About this change
- Page
- learn.microsoft.com/en-us/legal/cognitive-services/openai/data-privacy
- Kind
- Documentation
- Text hash
- 8e4872094a3b to 09d8458984f8
- Dated by
- the weekly check that first read the new text