Probably a very strict contract, and letting OpenAI read all the session logs like they do for their own customers.