New Blog Post | FAQ: Protecting the Data of our Commercial and Public Sector Customers in the AI Era

By Manny Sahota

 

Q: How is my organization’s data protected when I use Microsoft’s Generative AI Services? 

• At Microsoft, we have a long-standing practice of protecting our customers’ information. We are committed to security, privacy, and compliance across everything we do, and our approach to generative AI is no different. 

• The privacy commitments our commercial and public sector customers have long relied on for our enterprise cloud products also apply to our enterprise generative AI solutions, including Azure OpenAI Service and our Copilots.  

• In Protecting the Data of our Commercial and Public Sector Customers in the AI Era, we outline seven commitments that demonstrate our continued commitment to protecting our customers’ data when they use our Generative AI services.

• We will keep your organization’s data private. 

• You are in control of your organization’s data. 

• Your access control and enterprise policies are maintained. 

• Your organization’s data is not shared without your permission. 

• Your organization’s data privacy and security are protected by design. 

• Your organization’s data is not used to train foundation models without your permission. 

• Our products and solutions continue to comply with global data protection regulations. 

 

Q: The commitments in Protecting the Data of our Commercial and Public Sector Customers in the AI Era are focused on “your organization’s data”. What data does that include?  

• Your organization’s data refers to Customer Data, which is defined under Microsoft’s Product Terms as all data, including all text, sound, video, or image files, and software, that are provided to Microsoft by, or on behalf of, Customer through use of an Online Service.  

• Inputs and Output Content are both Customer Data under Microsoft’s Product Terms.

• Inputs means all Customer Data that Customer provides, designates, selects, or inputs for use by a generative artificial intelligence technology to generate or customize an output.  Customer prompts are considered “Inputs” and are Customer Data. 

• Output Content means any data, text, sound, video, image, code, or other content generated by a model in response to Input. 

• Microsoft uses Customer Data to provide you the services and our processing is subject to our existing privacy and contractual commitments, including the commitments we make in the Microsoft Products and Services Data Protection Addendum, Microsoft’s Product Terms, and the Microsoft Privacy Statement.  

 

Read the full post here: FAQ: Protecting the Data of our Commercial and Public Sector Customers in the AI Era