AIToday
Large Language ModelsAI Safety & AlignmentOpenAI BlogPublished: Aug 20, 2026, 06:01 JST

OpenAI Previews Private Safety Processing for ZDR

OpenAI Previews Private Safety Processing for ZDR

3 Key Points

  1. What happened

    OpenAI previewed Private Safety Processing, a system designed to detect risks across multiple related interactions without giving OpenAI personnel access to customer content. It is currently being tested with early customers, with rollout and a technical white paper planned for September.

  2. Why it matters

    Zero Data Retention promises that OpenAI does not retain prompts or responses, and existing safety systems evaluate each interaction individually. As models take on longer tasks, risks may only become visible across interactions, so this new approach aims to keep that promise while identifying patterns that could indicate misuse.

  3. What to watch

    The test is whether Private Safety Processing can genuinely detect coordinated or multi-step misuse without exposing content, and whether customers will trust the limited signals. Watch for the September rollout and technical white paper.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

OpenAI's announcement comes as frontier models take on longer, more complex tasks, where serious safety risks may only emerge across multiple interactions. Existing ZDR-compatible systems evaluate each interaction individually, which could miss patterns of misuse that span sessions or accounts. The company notes that some recent frontier-model deployments required customers to allow retention of sensitive content for safety, conflicting with security obligations. Private Safety Processing aims to resolve this tension by extending automated protections across related interactions without exposing content to personnel.

In both deployment scenarios, whether content stays on customer-controlled infrastructure or OpenAI storage with customer-controlled encryption keys, automated systems can identify potential misuse and return limited signals. Customers retain the ability to investigate alerts and can choose to share information with OpenAI for appeals or abuse investigations. This design reflects a collaborative approach, with input from customers across industries, regions, and company sizes.

The stakes are whether this preview can reassure organizations that handle highly sensitive data, such as financial records and health information, that safety monitoring does not compromise privacy. The success hinges on the technical implementation and customers' trust in the limited signal approach. September's technical white paper will likely be a key moment for scrutiny.

FAQ
What is Zero Data Retention?
Zero Data Retention is a promise that OpenAI does not retain eligible API customers' prompts or model responses after processing. Customer content is not available to OpenAI personnel for review, and enterprise data is not used for training unless customers opt in.
How does Private Safety Processing protect customer privacy?
It uses automated systems to identify patterns across related interactions without giving OpenAI personnel access to the content. If a risk is found, OpenAI receives only a narrowly defined signal about the activity type, not the underlying content.
When will Private Safety Processing be available?
It is currently being tested with early customers. OpenAI plans to start rolling it out and share a technical white paper in September.

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articlePalantir revenue surges 93%, but stock seen 30% overvalued at $171.54