Subscribe to the Salt blog to learn about the latest developments in API Security

Notification of Microsoft as New Subprocessor FAQ

Effective: May, 2024

1. Does this change the location of the data center pair for my customer instance?

No, this update does not impact the location of your data center pair, which remains as previously agreed. We will continue to adhere to all contractual requirements regarding the storage location of data.

2. What type of data does the Azure OpenAI process?

Azure OpenAI processes the following types of data:

  • Prompts and generated content. Prompts are submitted by the customer via the Salt Security Platform, and content is generated by the service, via the completions, chat completions, images and embeddings operations.
  • Augmented data included with prompts. The service retrieves relevant data from a configured data store and augments the prompt to produce generations that are grounded with data from the Salt Security Platform.
  • Training & validation data. Salt has provided training data consisting of prompt-completion pairs for the purposes of fine tuning the models in Salt’s specific instance of the Azure OpenAI service.

3. Why are you appointing this new subprocessor now?

We are leveraging the Azure OpenAI service and appointing Microsoft as a new subprocessor in order to enhance our customers' ability to action and prioritize alerts, facilitating better service delivery.

4. Is my data shared with other Salt customers?

No. Your customer data is not available to other customers.

5. Is my data shared by Microsoft with OpenAI?

No. The Azure OpenAI Service is fully controlled by Microsoft; Microsoft hosts the OpenAI models in Microsoft’s Azure environment and the Service does not interact with any services operated by OpenAI (e.g. ChatGPT, or the OpenAI API). Your data (including inputs, outputs, embeddings) as well as the training data Salt has used to train the models are never shared with OpenAI.

6. Is my data used to improve OpenAI models or Microsoft or third party products or services?

No. Your data is not used to improve OpenAI models, nor is it used to improve Microsoft or third party products or services.

7. How is my customer data used to improve Azure OpenAI models?

We have not used customer data to improve Azure OpenAI models. We’ve relied solely on non-customer data to train the Azure OpenAI models.

8. How does Microsoft process customer data?

Microsoft processes customer data in three primary ways:

  • Generating content from prompts using Azure OpenAI Service.
  • Creating fine-tuned (custom) models with training data provided by Salt.

9. I have additional questions or want more information. Who should I talk to?

Additional questions can be sent to privacy@salt.security or your designated account executive.

10. Can I opt out of this service?

Yes, customers can opt out by contacting your designated account executive or contacting us at privacy@salt.security.

We appreciate your continued trust in us as we strive to improve our services and provide you with the best possible experience.

‍