
OpenAI is testing Private Safety Processing, a system that detects misuse patterns across multiple AI interactions without giving employees access to customer prompts and responses. The system extends OpenAI's existing Zero Data Retention option. OpenAI plans to start rolling it out in September. Customers can keep data on infrastructure they control or on OpenAI infrastructure encrypted with customer-controlled keys.

Anthropic plans to let enterprise customers keep data on their own cloud infrastructure while still requiring 30-day retention for its advanced AI models, a source told The Hindu. The proposed changes have been in the works for months and involve over 100 customers including Salesforce. Anthropic had required 30-day retention for its Fable and Mythos models since June to guard against cyberattacks.
For Indian businesses, MediaNama reports that zero retention alone does not ensure compliance with India's Digital Personal Data Protection Act, 2023, which makes the Data Fiduciary responsible for processing by its Data Processor. The relevant processing provisions take effect in May 2027. The RBI's draft guidance on data governance for regulated entities addresses third-party arrangements but does not require zero-retention offerings.
MediaNama and The Hindu report the same competitive move but frame it differently. MediaNama leads with OpenAI's new Private Safety Processing, presenting it as a product choice for Indian customers under the DPDP Act and RBI draft guidance, with a neutral, explanatory tone. The Hindu leads with Anthropic's planned policy shift toward greater customer data control, framing it as a response to customer demands and a move to match OpenAI's offering. MediaNama treats zero-retention as a technical option within existing regulatory frameworks. The Hindu treats it as a strategic corporate pivot. Neither article is pro-government or critical, both are straight business journalism. A careful reader should note that both companies are moving toward giving customers more data control, but through different mechanisms, OpenAI through cryptographic separation, Anthropic through infrastructure choice. Watch for the RBI's draft data governance guidance to become binding, and for the DPDP Act's processing provisions to take effect in 2027.
Coverage: 2 sources, 2 neutral
Sources (2): medianama.com (neutral report), thehindu.com (neutral report)
This story was synthesised by AI from the 2 sources linked above. Methodology and corrections.
Updated: this story now draws on 2 sources.