Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
clientAuthority
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Who may approve client data entering this product?
modelProvider
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Which model provider processes the content?
subprocessors
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Which subprocessors are named, and where is the list?
trainingUse
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Is customer content used to train a model?
feedbackUse
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Is feedback or prompt history used to improve the service?
retention
Not confirmed
Not stated on the page reviewed for this profile.
Ask: How long is customer content kept?
deletion
Not confirmed
Not stated on the page reviewed for this profile.
Ask: How is customer content deleted, and on what notice?
humanAccess
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Who at the vendor can read customer content?
accessControl
Not confirmed
Not stated on the page reviewed for this profile.
Ask: What access controls and SSO does the vendor state?
encryption
Not confirmed
Not stated on the page reviewed for this profile.
Ask: What encryption in transit and at rest is stated?
assurance
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Which assurance reports (SOC, ISO) are published?
contract
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Where are the terms, DPA and liability position?
transfers
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Is content transferred outside the stated region?
incidents
Not confirmed
Not stated on the page reviewed for this profile.
Ask: How are security incidents notified?
changes
Not confirmed
Not stated on the page reviewed for this profile.
Ask: How are changes to terms or the model notified?
exit
Not confirmed
Not stated on the page reviewed for this profile.
Ask: How is content exported when the subscription ends?
connectors
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Which systems can the product connect to, and what can those connections do?
webSearch
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Can the product search the public web with customer content?
actionControl
Not confirmed
Not stated on the page reviewed for this profile.
Ask: Can the product send, file or change a record without a person confirming it?
humanReview
Not confirmed
Not stated on the page reviewed for this profile.
Ask: What does the vendor say a lawyer must still check?