Control #
D
2
.
4
Inform customers which regions are approved for AI operations
Tell customers where their AI data will be stored and processed by disclosing the approved regions. This information should appear in MSAs, data policies, or onboarding documentation.
Evidence
We'll list specific evidence that demonstrates compliance with this control. Typically, this is screenshots, proof of a legal or operational policy, or product demonstrations.
Recommended actions
We'll recommend specific practices and actions for complying with this control.