Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Non-use of enterprise data for training models is table-stakes for enterprise ML products. Google does the same thing, for example.

They'll want to climb the compliance ladder to be considered in more highly-regulated industries. I don't think they're quite HIPAA-compliant yet. The next thing after that is probably in-transit geofencing, so the hardware used by an institution reside in a particular jurisdiction. This stuff seems boring but it's an easy way to scale the addressable market.

Though at this point, they are probably simply supply-limited. Just serving the first wave will keep their capacity at a maximum.

(I do wonder if they'll start offering batch services that can run when the enterprise employees are sleeping...)



> don't think they're quite HIPAA-compliant yet

OpenAI offers baa to select customers.


Fedramp? High?


OpenAI says they offer a BAA but I haven’t heard of anyone actually being able to get to someone who could put one together.

You can get a BAA through Azure’s OpenAI service though, I believe the details are located in this document:

https://azure.microsoft.com/en-us/resources/microsoft-azure-...


Pretty sure I know an org that has baa with OpenAI directly. Agree that azure is more straightforward (and what I did at my startup).


It’s probably a lot easier if you’re a corp with name recognition, but the regular folks who post online about it have said no luck so far.


Not hi-trust afaik, but they will do hipaa eligible baa with select customers. As sister comment says, it’s easier to go through azure and you get basically the gamut of azure compliance certs for free.


I thought they already didn't use input data from the API to train; that it was only the consumer-facing ChatGPT product from which they'd use the data for training. It is opt-in for contributing inputs via API.

https://help.openai.com/en/articles/5722486-how-your-data-is...

That said, for enterprises that use the consumer product internally, it would make sense to pay to opt-out from that input being used.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: