> If you want zero data retention you have to go api only.

Time for the daily reminder that ZDR is a pinky-promise.

ZDR is a contract clause. That means:

    - It is subject to the rest of the contract, e.g. the good old "subject to lawful request or court order" carve-out clauses
    - It is subject to random provider exceptions, e.g. see Anthropic and Fable.
    - You have no way of verifying it beyond "trust me bro".

     - Run your own hardware which is obviously the ideal situation
     - If you can't run your own hardware, use confidential computing which runs the AI in secure enclave, e.g. Privatemode[1] (Germany) or Tinfoil[2] (US)

For my companies purposes US contract law is risk mitigating enough.

Which is why everybody buys tokens from Amazon or Microsoft or Google, not anthropic or OpenAI.

Because you already have your BI and mails on these providers.