AI article
The AI Transparency Gap: Why "We Don't Store Your Prompts" Isn't Enough
Community description: Six vectors through which your "deleted" LLM prompts can still leak, be reconstructed, or affect other users — and why the only real fix is stripping PII before it reaches any provider.
Dev.to | Mar 6, 2026 | Tiamat
Automated excerpt
You're talking to a model running on infrastructure shared with other users. GDPR Article 28 requires data processing agreements (DPAs) with ALL subprocessors who handle personal data. "We don't store your data" doesn't mean "our GPU cloud provider who processes your inference request doesn't log request metadata. " All six of these vectors share a common property: they activate the moment your data reaches the provider's infrastructure.
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.