Data handling per route
Each route hosting GLM-5.3-Flash has its own privacy posture, residency, and GDPR terms. Postures are maintained by Opper with a last-verification timestamp.
Zero data retention with abuse monitoring: prompts and outputs are kept for abuse monitoring only, for a window the provider does not state, and are not used for training. No training on customer data. US; SCCs; DPA available.
- Zero data retention
- With abuse monitoring, window not stated.
- Training
- No training on customer data.
- Logging
- Abuse monitoring
- Abuse monitoring
- On by default, holds flagged content
- GDPR DPA
- DPA available
- Transfer mechanism
- SCCs
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EU; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- No classifier
- Caching
- Content cached for replay
- Subprocessor access
- No subprocessor reads content
- GDPR DPA
- DPA available
- Transfer mechanism
- Not applicable — data stays in EU
Zero data retention with abuse monitoring: prompts and outputs are kept for up to 180 days for abuse monitoring only, and are not used for training. No training on customer data. GLOBAL; SCCs; DPA available.
- Zero data retention
- With abuse monitoring, 180-day window.
- Training
- No training on customer data.
- Logging
- Abuse monitoring (180-day retention)
- Abuse monitoring
- On by default, holds flagged content, 180 days, stored in Malaysia, a person can view samples
- Caching
- Content cached for replay
- GDPR DPA
- DPA available
- Transfer mechanism
- SCCs
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. US; unknown; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- No classifier
- GDPR DPA
- DPA available
- Transfer mechanism
- unknown
Zero data retention with abuse monitoring: nothing is logged or used for training; content flagged by abuse monitoring is held for review. No training on customer data. US; dpf sccs; DPA available.
- Zero data retention
- With abuse monitoring, flagged content held.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- Always on, holds flagged content, stored in United States
- Caching
- Content cached for replay
- Subprocessor access
- No subprocessor reads content
- GDPR DPA
- DPA available
- Transfer mechanism
- dpf sccs
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. GLOBAL; SCCs; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- On by default, keeps nothing
- Subprocessor access
- Subprocessors may read content
- GDPR DPA
- DPA available
- Transfer mechanism
- SCCs
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EU; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- No classifier
- Caching
- Content cached for replay
- Subprocessor access
- Subprocessors may read content
- GDPR DPA
- DPA available
- Transfer mechanism
- Not applicable — data stays in EU
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EU; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- Keeps nothing
- Caching
- Content cached for replay
- Subprocessor access
- Subprocessors may read content
- GDPR DPA
- DPA available
- Transfer mechanism
- Not applicable — data stays in EU
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EU; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- On by default, keeps nothing
- GDPR DPA
- DPA available
- Transfer mechanism
- Not applicable — data stays in EU
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EU; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- No classifier
- Subprocessor access
- Subprocessors may read content
- GDPR DPA
- DPA available
- Transfer mechanism
- Not applicable — data stays in EU
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training by default; opt-in possible. GLOBAL; SCCs; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training by default; opt-in possible.
- Logging
- None
- Abuse monitoring
- No classifier
- Caching
- Content cached for replay
- GDPR DPA
- DPA available
- Transfer mechanism
- SCCs
Zero data retention with abuse monitoring: prompts and outputs are kept for up to 30 days for abuse monitoring only, and are not used for training. No training on customer data. US; SCCs; DPA available.
- Zero data retention
- With abuse monitoring, 30-day window.
- Training
- No training on customer data.
- Logging
- Abuse monitoring (30-day retention)
- Abuse monitoring
- On by default, holds flagged content, a person can view samples
- GDPR DPA
- DPA available
- Transfer mechanism
- SCCs
Content is retained: provider logging. No training on customer data. GLOBAL; SCCs; DPA available.
- Zero data retention
- Retained: provider logging.
- Training
- No training on customer data.
- Logging
- Other
- Abuse monitoring
- No classifier
- GDPR DPA
- DPA available
- Transfer mechanism
- SCCs
Zero data retention: nothing is logged or used for training. No training on customer data. GLOBAL; SCCs; DPA available.
- Zero data retention
- Yes. Nothing is logged or used for training.
- Training
- No training on customer data.
- Logging
- None
- Caching
- Content cached for replay
- Subprocessor access
- Subprocessors may read content
- GDPR DPA
- DPA available
- Transfer mechanism
- SCCs
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. US; SCCs; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- On by default, keeps nothing
- GDPR DPA
- DPA available
- Transfer mechanism
- SCCs
Content is retained: provider logging. Training posture pending review. GLOBAL; unknown.
- Zero data retention
- Retained: provider logging.
- Logging
- Other
- Caching
- Content cached for replay
- Transfer mechanism
- unknown
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EEA; SCCs; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- No classifier
- Caching
- Content cached for replay
- Subprocessor access
- No subprocessor reads content
- GDPR DPA
- DPA available
- Transfer mechanism
- SCCs
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. GLOBAL; SCCs; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- On by default, keeps nothing
- Caching
- Content cached for replay
- GDPR DPA
- DPA available
- Transfer mechanism
- SCCs
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. EU; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- No classifier
- Caching
- Content cached for replay
- GDPR DPA
- DPA available
- Transfer mechanism
- Not applicable — data stays in EU
Zero data retention: nothing is logged, held for abuse monitoring or used for training. No training on customer data. US; SCCs; DPA available.
- Zero data retention
- Yes. Nothing is logged, held for abuse monitoring or used for training.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- No classifier
- GDPR DPA
- DPA available
- Transfer mechanism
- SCCs
Zero data retention with abuse monitoring: nothing is logged or used for training; content flagged by abuse monitoring is held for review. No training on customer data. GLOBAL; unknown; DPA available.
- Zero data retention
- With abuse monitoring, flagged content held.
- Training
- No training on customer data.
- Logging
- None
- Abuse monitoring
- On by default, holds flagged content
- Caching
- Content cached for replay
- Subprocessor access
- Subprocessors may read content
- GDPR DPA
- DPA available
- Transfer mechanism
- unknown