Vendor category

AI Tools vendors

AI tools — large language model APIs, coding assistants, and AI-powered SaaS features — present novel and evolving data risks. Data sent to AI models for processing may be used for training, retained indefinitely, or subject to regulatory restrictions depending on data type.

Risk profile for this category

Rapidly evolving risk profile. Key questions: Is data sent to the API used for model training? What is the data retention period for inputs and outputs? Where are models hosted and processed? For HIPAA, PHI cannot be sent to most AI APIs without a BAA. For GDPR, international transfer and purpose limitation requirements apply.

Sample vendors in this category

OpenAI API

openai.com

SOC 2 Type II. Enterprise tier does not train on API data. HIPAA BAA available for healthcare.

View profile →

Anthropic API

anthropic.com

SOC 2 Type II. Does not train on API data by default.

View profile →

Google Vertex AI

cloud.google.com

SOC 2 Type II, FedRAMP. Enterprise data isolation.

View profile →

This is a sample of vendors in this category. Search the full TrustVendor graph for comprehensive coverage including posture scores, certifications, and subprocessor counts.

Search all AI Tools vendors →

Common questions

Does OpenAI train on my company's data when I use the API?
For API customers (as distinct from ChatGPT web users), OpenAI does not use API inputs or outputs to train models by default. Enterprise customers have additional contractual protections. Review OpenAI's API data usage policies, which have been updated multiple times.
Can I use an AI tool that processes PHI?
Only if you have a signed HIPAA BAA with the AI vendor and have confirmed that their handling of PHI meets HIPAA requirements. OpenAI offers a HIPAA BAA for qualifying enterprise customers. Most general-purpose AI APIs do not offer BAAs.

Monitor your AI Tools vendors.

Get continuous posture scores, subprocessor monitoring, and certification tracking for every AI Tools vendor in your portfolio.

Book a demo