3 ms·

In answer to file security: "We utilize Amazon Web Services (AWS) for uploading and storing files, ensuring robust security measures, including data encryption

In answer to file security: "We utilize Amazon Web Services (AWS) for uploading and storing files, ensuring robust security measures, including data encryption and access control." Well, sure, but that's the file at rest. What about the security / privacy of the data as it's fed to ChatGPT? More and more of these "ask your doc / data a question" apps are popping up. Isn't this about equivalent to putting the document on the public internet or is there some sort of sandboxing involved?

slashdev 3y ago
If you use the API, which this clearly does, they don't train on the input. You can see their guarantees in their terms and conditions, but you have a reasonable expectation of privacy. I say reasonable, because in a company growing that fast, everything is on fire all the time and security is the last thing considered.
- aik 3y ago
  Azure OpenAI’s GPT APIs I would imagine is likely more secure, and now is HIPAA compliant as well.
  - jeron 3y ago
    source for the curious: https://azure.microsoft.com/en-us/products/cognitive-services/openai-service https://azure.microsoft.com/en-us/products/cognitive-service...
  - anonymouse008 3y ago
    I’d really love a consultant to stick their neck out and say these environments are hipaa/hi tech compliant. A press release does not make a defense in a breach. This may be a dumb question, but how would Azure ensure GPU clean tenancy and segmentation of data in these pipelines at those prices? [0] https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech https://learn.microsoft.com/en-us/compliance/regulatory/offe... ‘Microsoft in-scope cloud platforms & services Azure and Azure Government Azure DevOps Services Dynamics 365 and Dynamics 365 U.S. Government Intune Microsoft Defender for Cloud Apps Microsoft Healthcare Bot Service’ Are they piggybacking on that?
- deleted 3y ago
  [deleted]
dndn1 3y ago
I look at these tools to see how they communicate these data processing/security details to their users. There appears to be a lot of apathy/total disregard to giving users any clear clue. It might not matter to me or this audience - we probably know the direction our data is heading - but it matters to less techie people, to ordinary employees and to civil servants and government people at the bottom and the top, who have no notion where their data is processed and who they are trusting with it.

slashdev 3y ago

If you use the API, which this clearly does, they don't train on the input. You can see their guarantees in their terms and conditions, but you have a reasonable expectation of privacy. I say reasonable, because in a company growing that fast, everything is on fire all the time and security is the last thing considered.

aik 3y ago
Azure OpenAI’s GPT APIs I would imagine is likely more secure, and now is HIPAA compliant as well.
- jeron 3y ago
  source for the curious: https://azure.microsoft.com/en-us/products/cognitive-services/openai-service https://azure.microsoft.com/en-us/products/cognitive-service...
- anonymouse008 3y ago
  I’d really love a consultant to stick their neck out and say these environments are hipaa/hi tech compliant. A press release does not make a defense in a breach. This may be a dumb question, but how would Azure ensure GPU clean tenancy and segmentation of data in these pipelines at those prices? [0] https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech https://learn.microsoft.com/en-us/compliance/regulatory/offe... ‘Microsoft in-scope cloud platforms & services Azure and Azure Government Azure DevOps Services Dynamics 365 and Dynamics 365 U.S. Government Intune Microsoft Defender for Cloud Apps Microsoft Healthcare Bot Service’ Are they piggybacking on that?
deleted 3y ago
[deleted]

dndn1 3y ago

I look at these tools to see how they communicate these data processing/security details to their users. There appears to be a lot of apathy/total disregard to giving users any clear clue. It might not matter to me or this audience - we probably know the direction our data is heading - but it matters to less techie people, to ordinary employees and to civil servants and government people at the bottom and the top, who have no notion where their data is processed and who they are trusting with it.