Lumen Notes Inc.

Security review: AI and data

Answers as of 2026-11-03. Every quote is the vendor's own text.

Question 1Verified

Is our data used to train AI models?

No. Customer data is never used to train AI models.

  • /api/crm-sync
  • /api/summarize
  • /api/digest
“Retained data is never used for model training without your express permission.”

Anthropic, API and data retention · fetched 2026-11-03

  • /api/embed
“Your data is your data. As of March 1, 2023, data sent to the OpenAI API is not used to train or improve OpenAI models (unless you explicitly opt in to share data with us).”

OpenAI, your data · fetched 2026-11-03

Question 2Not stated

How long do AI providers retain our data?

Our AI providers keep prompts and outputs for at most 30 days.

  • /api/crm-sync
“Data exchanged with MCP servers, including tool definitions and execution results, is retained according to Anthropic's standard data retention policy.”

Anthropic, MCP connector · fetched 2026-11-03

  • /api/summarize
“Only what is technically necessary for the feature to work is retained. Conversation content (your prompts and Claude's outputs) is not retained by default; the exception is Covered Models, which require 30-day retention.”

Anthropic, API and data retention · fetched 2026-11-03

  • /api/digest
Feature
Batch processing
Details
29-day retention; async storage required. See Batch processing.

Anthropic, API and data retention · fetched 2026-11-03

  • /api/embed
Endpoint
/v1/embeddings
Abuse monitoring retention
30 days

OpenAI, your data · fetched 2026-11-03

Question 3Not true

Do you have zero data retention with your AI providers?

Yes, except: /api/crm-sync (Anthropic Messages API with mcp_servers (MCP connector), not covered by ZDR); /api/digest (Anthropic Message Batches, not covered by ZDR).

Revised on 2026-11-03 to match the vendors' pages.

  • /api/crm-sync
“The MCP connector is not covered by ZDR arrangements.”

Anthropic, MCP connector · fetched 2026-11-03

  • /api/summarize
“Claude Messages and Token Counting APIs: ZDR applies to these endpoints for eligible features listed in the feature eligibility table. Features that ride on /v1/messages but are marked "No" in the table (such as code execution) are not covered.”

Anthropic, API and data retention · fetched 2026-11-03

  • /api/digest
Feature
Batch processing
ZDR eligible
No

Anthropic, API and data retention · fetched 2026-11-03

  • /api/embed
Endpoint
/v1/embeddings
Zero Data Retention eligible
Yes

OpenAI, your data · fetched 2026-11-03

Question 4Not stated

Where is our data processed?

In the United States.

  • /api/crm-sync
  • /api/summarize
  • /api/digest

Not stated on the vendor's page.

Anthropic, MCP connector · fetched 2026-11-03
Anthropic, API and data retention · fetched 2026-11-03

  • /api/embed
Endpoint or feature
/v1/embeddings
Storage regions
All listed regions

OpenAI, your data · fetched 2026-11-03

Question 5Outdated

Which AI providers see our data?

Anthropic and OpenAI, under their published sub-processor lists.

OpenAI updated its sub-processor list on October 14, 2026 (previously June 2, 2026), after this answer was written (2026-09-01).

  • /api/crm-sync
  • /api/summarize
  • /api/digest

No further third party is named on this page.

Anthropic, MCP connector · fetched 2026-11-03
Anthropic, API and data retention · fetched 2026-11-03

  • /api/embed
Entry
Cloudflare, Ltd. (changed)
Purpose
Content delivery network provider (was: Content delivery network provider; Web Hosting)
Locations
Processing is performed at the data center that is closest to the End User. For requests sent to us.api.openai.com or eu.api.openai.com, OpenAI uses Cloudflare Regional Services so that TLS termination and HTTPS decryption occur within the selected; processing region. (was: Processing is performed at the data center that is closest to the End User)
Entry
OAI International, Inc. (added)
Services
API; ChatGPT Enterprise; ChatGPT Edu; ChatGPT Business
Purpose
Vendor affiliate (parent: OpenAI, OpCo, LLC)
Locations
United States

OpenAI, your data · fetched 2026-11-03