Control #
C
4
.
4
Disclose AI log retention in customer contracts
Include your logging and retention practices in your customer agreements. Clearly state what’s logged, how long it’s kept, and whether customers can request deletion or opt out.
Evidence
We'll list specific evidence that demonstrates compliance with this control. Typically, this is screenshots, proof of a legal or operational policy, or product demonstrations.
Recommended actions
We'll recommend specific practices and actions for complying with this control.