OpenAI (API)

Back to Vendors

Vendor summary

Category
AI / ML
Uses AI
Yes
Processes PII
Yes
Training disclosure
no
Retention policy
30d
Evidence status
Valid
Risk / attention
Medium
  • Processes customer PII via AI

AI Vendor Questionnaire

  1. Does the vendor use AI/ML in their service?

    Yes

  2. Does the vendor process customer PII?

    Yes

  3. Is customer data used to train models?

    No

  4. What is the vendor's retention policy?

    30d

  5. What evidence supports these claims?

    https://docs.example.com/openai

  6. When does current evidence expire?

    2026-05-07

  7. Is human review involved in AI decisions?

    Unknown / Not provided

  8. Does the vendor provide an AI policy or security documentation?

    Yes (link on file)

  9. What is the risk level and why?

    Risk level: medium. Processes customer PII via AI

  10. What actions are required before audit?

    Processes customer PII via AI