Vendor Data Use

Vendor data use refers to how third-party service providers, software vendors, and technology partners handle, process, and retain data that organizations share with them. This is a critical governance concern because vendors often have broad access to sensitive customer, employee, and operational data, creating potential risks around privacy, security, and regulatory compliance. Organizations must establish clear contractual terms, audit vendor practices, and monitor data handling to ensure third parties comply with applicable regulations like GDPR, CCPA, and industry-specific standards, while also protecting against unauthorized data monetization or misuse.

1 item

Corporate PolicyUS2026-09-08

OpenAI Cannot Rule Out Training on Researchers' Codex Sessions

OpenAI announced a solution to the Navier-Stokes Millennium Prize Problem using an internal AI model and 10,000 concurrent agents, but the announcement drew immediate controversy. NYU professor Tristan Buckmaster and Anthropic researcher Levent Alpoge, who published related findings one day earlier, raised concerns that OpenAI may have accessed or trained on data from their Codex sessions. OpenAI stated it did not access specific user data but acknowledged it could not rule out that de-identified training data derived from their Codex usage had contributed to its model's approach.

OpenAI Codex training data transparency user data governance intellectual property vendor data use data classification