Exa AI / Internet AI provider
Following our earlier communication about changing our Internet AI provider, the chosen service has updated its DPA to cover inputting of personal data into search queries. We have aligned our own DPA accordingly. This enables customers to use Internet AI more broadly within our services, without changing our core commitments to confidentiality, security and compliance.
We have been trialling Google’s LLM capabilities in selected markets. Including Google in our DPA reflects our intention to make this functionality available to all customers. As with all our LLM providers, we have contractually agreed Zero Data Retention and no-training clauses, so security and data privacy are unaffected.
OpenAI
We have added an additional processing region for our existing subprocessor, OpenAI, located in the European Union (EU). This enables us to support customers who use our EU production environment while maintaining data processing within the region.
There are no changes to the existing arrangements for OpenAI’s US region or the UK Transfer Impact Assessment (TIA) already in place.