Q: GDPR / GPT 4.0

I’m interested in using your platform, but I would like to understand more about how you handle data privacy, especially regarding the integration of GPT-4.0. Specifically:
Are the documents I upload or the interactions I have with your platform sent to OpenAI or any third-party servers for processing?
If so, how do you ensure compliance with GDPR, particularly regarding data storage location, user consent, and the right to erasure?
Can you confirm whether the data processed via GPT-4.0 is used for training purposes by OpenAI or any other entity?
How long are uploaded documents or any related data retained on your servers, and do you offer options for immediate deletion after processing?

Your insights on these matters would greatly help me assess if Humata is suitable for my use case.

Thank you for your time and assistance.

ai.nextigenPLUSDec 16, 2024
Founder Team
Cyrus_Humata

Cyrus_Humata

Dec 16, 2024

A: Yes, you can immediately and permanently delete your data at any time.

We have major enterprises and government institutions that trust use Humata for confidential and mission critical use cases.

Here's a link to our security page, which includes FAQs: https://www.humata.ai/security

Humata is SOC 2 Type II certified and compliant. You own and control all of your data. You can chose to delete permanently at anytime. All your information is encrypted at rest and in transit. Unlike ChatGPT, Claude, Gemini, etc Humata does NOT train on your data. In addition, we have a strict DSA (data sharing agreement) with OpenAI where data is NOT used for training and has a 30 day retention policy.

Share
Helpful?
Log in to join the conversation
aboleabolePLUS
Posted: Dec 16, 2024

I’m also interested in this

aboleabolePLUS
Posted: Dec 17, 2024

Hi Cyrus, this was the key point in the original question I was curious about. We can’t have data leaking into the public domain.
“ Are the documents I upload or the interactions I have with your platform sent to OpenAI or any third-party servers for processing?”

Posted: Dec 18, 2024

Please I also need a CLEAR answer for:
“ Are the documents I upload or the interactions I have with your platform sent to OpenAI or any third-party servers for processing?”

Founder
Posted: Mar 17, 2025

Yes, we currently use GPT-4o for data processing. We have a strict Data Security Agreement (DSA) in place with OpenAI that strictly prohibits any data from being trained with OpenAI plus an additional data retention policy where data is only retained for 30 days. You own and control your data and you can chose to permanently delete it at any time.

aboleabolePLUS
Posted: Dec 28, 2024

Hi Cyrus, did you look into this?

Posted: Dec 29, 2024

Starting to be tired of waiting…

Posted: Mar 16, 2025

We need answers here....