Where does this provider put your AI data — and who can compel its disclosure?
| Residency | United States us |
|---|---|
| Sovereignty | United States us |
| Endpoints | api.perplexity.ai |
| Packages | @ai-sdk/perplexity (npm) |
How does this provider treat the data you send it? Advisory statements about documented practices — not legal advice.
| Trains on customer API data by default | No source — 'Zero Data Retention Policy': 'We do not retain data sent through the Chat Completions API, and we do not use customer data to train our models or for any purpose beyond processing the immediate request'; DPA: 'Personal Data will not be used for training of Perplexity's large language models' (retrieved 2026-10-10) |
|---|---|
| Retention (API inputs/outputs) | Zero retention is the documented API default: 'Perplexity maintains a strict Zero Data Retention Policy for the Chat Completions API' — prompt/response content is not retained; only billing metadata (token counts, model, timestamps, API key ID) is kept. No abuse-monitoring retention window for API content is published. The consumer app (Free/Pro/Max) is different — training on app data is on by default with an opt-out toggle — and is out of scope for this API entry. source — 'Perplexity maintains a strict Zero Data Retention Policy for the Chat Completions API'; docs FAQ: 'By default, the API has zero day retention of user prompt data, which is never used for AI training' (retrieved 2026-10-10) |
| Subprocessor list | https://trust.perplexity.ai/subprocessors — Perplexity DPA §6 'Use of Subcontractors' grants general authorization for 'the subcontractors set out at https://trust.perplexity.ai/subprocessors' (retrieved 2026-10-10) |
| Enterprise tier | The no-training/zero-retention posture is the API default for all tiers, so Enterprise changes little for API use: it adds the formal DPA (30-day deletion of personal data after termination, subprocessor change notice), SOC 2 Type II and CAIQlite via the Trust Center, and procurement via AWS Marketplace or sales. Compute is hosted on AWS in North America (docs FAQ). source — Data Processing Addendum (last updated 2026-08-13): §10 deletion of Personal Data within 30 days of service termination; SOC 2 Type II and CAIQlite listed on the Trust Center (retrieved 2026-10-10) |
| Entry last reviewed | 2026-10-10 |