Third-Party AI Services and API Data Processing
GS-JJ accesses third-party generative AI services through API and enterprise arrangements rather than by submitting customer designs to publicly available consumer AI tools.
We configure the third-party services we use in accordance with the applicable data-use policies and controls available to us and prioritize established AI service providers that offer defined enterprise and API data protection practices. For example, OpenAI’s API services generally provide that API inputs and outputs are not used to train its models unless the customer actively opts to share such data. Similarly, Google Gemini API projects with billing enabled generally provide that prompts and responses are not used for product improvement or model development by default. Different data-use rules may apply depending on the specific service, configuration, or settings selected by the account or project owner.
GS-JJ relies on the applicable API, privacy, security, and data-use policies of the third-party providers whose services we use, including, but not limited to, Google and OpenAI. Because third-party providers may change their policies, technical capabilities, security
practices, retention periods, or data-processing terms over time, GS-JJ does not make absolute representations regarding systems or processing activities that are outside GS-JJ’s direct technical or contractual control. Third-party providers may also process or retain certain information as permitted by their applicable policies and agreements for purposes such as security monitoring, abuse prevention, legal compliance, troubleshooting, or operating and protecting their services.
GS-JJ will continue to monitor the policies and capabilities of the third-party AI services it uses and will adjust its data protection practices as appropriate.