4 ms·
> If you’re running a local LLM then the privacy implications are clearly pretty different than if you’re essentially sending people’s documents verbatim into a
by WastingMyTime89 4y ago
> If you’re running a local LLM then the privacy implications are clearly pretty different than if you’re essentially sending people’s documents verbatim into an external LLM.
Is it?
You are basically entering a contractual relationship with them regarding the propagation of your document and they are themselves entering a contractual relationship with their suppliers. It's not different from hosting in the cloud.
Do you expect every webapps you use to tell you if they use Azure, AWS or GCP?
- ceejayoz 4y ago> Do you expect every webapps you use to tell you if they use Azure, AWS or GCP? In their privacy policies, yes. And I expect them to have signed a DPA with those and other vendors.
- WastingMyTime89 4y agoI’m downvoted but I still believe the position doesn’t make sense. You state and negotiate the level of protection you want for your data with your direct interlocutor. They then enforce that with their own suppliers. You are free to want to know the whole chain of companies involved in providing you a service but that’s very unusual.
- ceejayoz 4y agoIt's hardly that unusual. https://cloud.google.com/terms/subprocessors https://cloud.google.com/terms/subprocessors https://aws.amazon.com/compliance/sub-processors/ https://aws.amazon.com/compliance/sub-processors/ https://www.cloudflare.com/gdpr/subprocessors/ https://www.cloudflare.com/gdpr/subprocessors/ https://www.atlassian.com/legal/sub-processors https://www.atlassian.com/legal/sub-processors https://slack.com/slack-subprocessors https://slack.com/slack-subprocessors https://www.linkedin.com/legal/l/customer-subprocessors https://www.linkedin.com/legal/l/customer-subprocessors https://grafana.com/legal/list-of-subprocessors/ https://grafana.com/legal/list-of-subprocessors/
- WastingMyTime89 4y agoLooking at your answer, I surmised it was a legal obligation and yes, it's indeed part of the European GDPR. I learnt something new today.