Do the AI functions imply that data is disclosed to third parties?

Kundo uses Microsoft AB as a sub-processor to deliver our AI features. For existing customers, this sub-processor has already been added to Kundo's sub-processor list. Therefore, starting to use these features does not imply that a new sub-processor needs to be approved, this is already handled as part of our communication in September 2023.

Does our personal data leave the EU when we use Kundo's AI features?

No, no personal data leaves the EU. We use Microsoft's data centers within the EU for data processing.

Is personal data shared between Microsoft and OpenAI?

No, no personal data leaves Microsoft in connection with our use of the service. OpenAI has a partnership with Microsoft which means that Microsoft receives a copy of OpenAI's trained models. No data is sent to OpenAI from Microsoft.

Is our data used to train OpenAI's or Microsoft's AI?

No, the data sent to Microsoft as part of Kundo's AI features is not used to train any models. This is explicitly prohibited according to the agreements in place between Kundo and Microsoft.

How long is data stored at Microsoft?

Data is stored for 30 days at Microsoft, and only for the purpose of investigating abuse of their services.

Do Microsoft staff have access to the data?

Yes, in theory, staff have access to the data. Staff are only entitled to handle data if there are suspicions of abuse, and it is strictly specified that only staff associated with Microsoft's European operations may be part of such an investigation.

Where can I read more detailed information about how Microsoft handles personal data?

For more detailed information from Microsoft, the Data, privacy, and security for Azure OpenAI Service is recommended.

Does Microsoft meet the requirements for the EU-US Data Privacy Framework?

Yes, Microsoft meets the highest requirements (HR and non-HR data) for the handling of personal data.