Where does this provider put your AI data — and who can compel its disclosure?
| Residency | United States us |
|---|---|
| Sovereignty | United States us |
| Endpoints | api.groq.com |
| Packages | groq (Python), groq-sdk (npm), @ai-sdk/groq (npm) |
How does this provider treat the data you send it? Advisory statements about documented practices — not legal advice.
| Trains on customer API data by default | No source — Services Agreement (last modified 2026-06-22) §4.2 'Inputs and Outputs': 'Groq is not permitted to use Inputs or Outputs for training or fine-tuning any AI Model Services or other models, unless explicitly granted permission or instructed by Customer' (retrieved 2026-10-10) |
|---|---|
| Retention (API inputs/outputs) | No retention of inference request data by default. Reliability/abuse-monitoring logs retained up to 30 days unless legally required longer; Batch API input/output files retained 30 days unless deleted earlier; fine-tuning datasets/weights retained until the customer deletes them. All customers may enable Zero Data Retention in Data Controls (disables batch/fine-tuning). Retained data sits in GCP buckets in the United States. source — 'Your Data in GroqCloud': 'By default, Groq does not retain customer data for inference requests'; system reliability/abuse logs 'retained for up to 30 days'; 'All customers may enable Zero Data Retention (ZDR) in Data Controls settings' (retrieved 2026-10-10) |
| Subprocessor list | https://trust.groq.com/subprocessors — Groq Trust Center subprocessor list (18 entries incl. Google Cloud Platform, Stripe, Cloudflare, Stytch, PostHog, Wiz); the Customer DPA at console.groq.com/docs/legal/customer-data-processing-addendum governs personal-data processing (retrieved 2026-10-10) |
| Enterprise tier | The published baseline (no training, self-serve ZDR) applies to all tiers; customers under offline/enterprise variants of the Services Agreement are governed by their own paper (Services Agreement preamble), whose contents are not public. A public DPA and a Business Associate Addendum (HIPAA workloads) exist as incorporated URL terms; neither covers Beta Services. source — Preamble: 'If you signed an offline variant of this Agreement for use of the Cloud Services, the terms below do not apply to you, and your offline terms govern' (retrieved 2026-10-10) |
| Entry last reviewed | 2026-10-10 |