🏁 Script executed:

printf '%s\n' '--- applicable repository guidance ---'
find /tmp/coderabbit-repo-knowledge/deepnote-deepnote-4f22e1a3 -type f -name '*.md' -print | sort
printf '%s\n' '--- target lines ---'
cat -n docs/security-overview.md | sed -n '45,65p'
printf '%s\n' '--- nearby provider references ---'
rg -n -i 'anthropic|openai|zero.?data|30 days|customer data|AWS environment|customer.s AWS' docs README.md .github 2>/dev/null | head -120

Repository: deepnote/deepnote

Length of output: 10928

🏁 Script executed:

printf '%s\n' '--- repository-wide documentation guidance ---'
cat /tmp/coderabbit-repo-knowledge/deepnote-deepnote-4f22e1a3/conventions/repo-wide.md
printf '%s\n' '--- documentation guidance ---'
cat /tmp/coderabbit-repo-knowledge/deepnote-deepnote-4f22e1a3/learnings/docs.md
printf '%s\n' '--- relevant repository learning ---'
cat /tmp/coderabbit-repo-knowledge/deepnote-deepnote-4f22e1a3/learnings/repo-wide.md
printf '%s\n' '--- AI privacy policy text ---'
cat -n docs/ai-data-privacy.md | sed -n '1,40p'

Repository: deepnote/deepnote

Length of output: 5959

🌐 Web query:

Anthropic zero data retention agreement applies products approved enterprise API use exceptions official

💡 Result:

Anthropic's Zero Data Retention (ZDR) is a contractual arrangement that prevents Anthropic from storing customer prompts or model responses at rest after an API response is returned, except as required to comply with law or combat misuse and harm (e.g., enforcing Usage Policies) [1][2][3]. ZDR is not a default setting and must be requested and approved on a per-organization basis through the Anthropic sales team [1][2][4]. The policy applies to the following products, subject to approval and specific enablement: 1. Eligible Anthropic APIs [2][3] 2. Anthropic products using a Commercial organization API key (including Claude Code accessed via the API) [2][3] 3. Claude Code when used through a Claude for Enterprise plan (with ZDR specifically enabled for that organization) [1][2][4] Crucially, standard Claude Teams and Claude Enterprise chat product interfaces are not eligible for ZDR [1][3]. For Claude for Enterprise, administrators have control over standard data retention settings (with a 30-day minimum) rather than ZDR [3][5]. Additionally, enablement of ZDR is not automatic for new organizations created under an existing account; it must be requested separately for each new organization [1][4]. Note that for ZDR-eligible arrangements, Anthropic still retains User Safety classifier results to enforce its Usage Policy [2]. Organizations using Claude via third-party cloud platforms (e.g., Amazon Bedrock, Google Cloud, or Microsoft Foundry) should refer to those specific platforms' policies, even if using an Anthropic model [1][4][6]. top_results: [1][2][4][3][5]

Citations:

• 1: https://platform.claude.com/docs/en/manage-claude/api-and-data-retention
• 2: https://privacy.claude.com/en/articles/8956058-i-have-a-zero-data-retention-agreement-with-anthropic-what-products-does-it-apply-to
• 3: https://www.getvoibe.com/resources/claude-api-data-retention/
• 4: https://code.claude.com/docs/en/zero-data-retention
• 5: https://code.claude.com/docs/en/data-usage
• 6: https://support.claude.com/en/articles/15425996-data-retention-practices-for-covered-models

🌐 Web query:

OpenAI API data usage policies 30 days retention endpoint exceptions zero data retention official

💡 Result:

OpenAI's standard data retention policy for API usage dictates that customer content—such as prompts and responses—is retained for up to 30 days in abuse monitoring logs to facilitate safety and abuse detection [1][2]. This retention period applies by default unless a longer period is legally required or necessary to protect services from harm [1]. Zero Data Retention (ZDR) is a control that, once approved and configured, excludes customer content from these abuse monitoring logs [1][3]. ZDR is subject to prior approval by OpenAI and the acceptance of additional requirements [1]. Key aspects of ZDR include: Endpoint Eligibility: ZDR is not available for all endpoints [1]. Stateless endpoints, such as /v1/chat/completions, /v1/responses, and /v1/realtime, are generally eligible for ZDR [1][4]. Conversely, stateful endpoints that support persistent sessions or long-term management—such as the /v1/conversations, /v1/conversations/items, and Assistants-related APIs—are generally ineligible for ZDR, and content processed through them may be retained until the customer deletes it [1][4][3]. Legal and Safety Exceptions: Even with ZDR enabled, OpenAI maintains mandatory exceptions for legal compliance [1][4]. Specifically, OpenAI is required by law to report potential instances of child sexual abuse material (CSAM), and data flagged for such risks will be retained regardless of ZDR status to support manual review and mandatory reporting [4]. Data for Training: For API customers, OpenAI does not use inputs or outputs to train its models by default [5]. This protection is standard for the API platform, regardless of whether ZDR is enabled [5]. Management: Organizations can manage their retention settings via the OpenAI API, where they may configure project-level retention types such as zero_data_retention or modified_abuse_monitoring [6]. Customers interested in ZDR should contact OpenAI sales to discuss eligibility and requirements [3].

Citations:

• 1: https://developers.openai.com/api/docs/guides/your-data
• 2: https://community.openai.com/t/data-retention-for-batches/770572/5
• 3: https://www.spotdev.co.uk/blog/openai-zero-data-retention
• 4: https://data-today.net/openai-zero-data-retention-frontier-models/
• 5: https://openai.com/policies/how-your-data-is-used-to-improve-model-performance/
• 6: https://developers.openai.com/api/reference/resources/admin/subresources/organization/subresources/projects/subresources/data_retention/methods/update

🏁 Script executed:

printf '%s\n' '--- repository guidance ---'
for f in /tmp/coderabbit-repo-knowledge/deepnote-deepnote-4f22e1a3/*/*.md; do
  printf '\n--- %s ---\n' "$f"
  head -80 "$f"
done
printf '%s\n' '--- target file ---'
cat -n docs/security-overview.md | sed -n '40,65p'

Repository: deepnote/deepnote

Length of output: 13586