Where does this provider put your AI data — and who can compel its disclosure?
| Residency | United States us |
|---|---|
| Sovereignty | United States us |
| Endpoints | api.together.xyz, api.together.ai |
| Packages | together (Python), together-ai (npm), @ai-sdk/togetherai (npm) |
How does this provider treat the data you send it? Advisory statements about documented practices — not legal advice.
| Trains on customer API data by default | No source — 'Training opt-in': 'Data sharing for training other models is opt-in and not enabled by default'; Privacy Policy §1: 'We do not use any data collected from you to train our models without your explicit opt-in and consent' (retrieved 2026-10-10) |
|---|---|
| Retention (API inputs/outputs) | Stored by default with no fixed window: prompts and responses persist in user history until the user deletes them ('By default, Together stores the prompts you send and the responses models return, and may use them for product improvements'). Self-serve Zero Data Retention in Privacy & Security settings disables storage of prompts/responses ('not persisted to non-volatile storage'); request metadata (token counts, model IDs, timestamps) is still retained for billing. source — 'What Together stores': 'By default, Together stores the prompts you send and the responses models return, and may use them for product improvements… you can delete it at any time'; no day-count retention window is published (retrieved 2026-10-10) |
| Subprocessor list | https://trust.together.ai/ — Together Trust Center (Vanta-hosted) Subprocessors section, updated 2026-05-26; the Privacy Policy §2.3 refers only to generic 'Service Providers, Third-Party Vendors' (retrieved 2026-10-10) |
| Enterprise tier | Enterprise adds deployment options rather than different defaults: private networking and VPC/dedicated deployments including EU regions (serverless endpoints offer no region selection). ZDR and the training opt-in are available to all organisations via settings, not enterprise-gated; custom addenda are contemplated by ToS §14.02 but not public. source — 'Enterprise data residency and private networking': 'Together supports private networking and VPC-based deployments, including in EU regions… Serverless endpoints do not offer region selection' (retrieved 2026-10-10) |
| Entry last reviewed | 2026-10-10 |