Data handling and providers
Which parties receive prompts, outputs, and logs? Obtain current terms covering retention, training use, regions, and deletion.
Inspect PrivateStack's published data-handling summaryComparison evidence
Direct model API
Calling a model API directly lets your application own the interaction design and orchestration. That flexibility can be the better fit when your team wants to build and operate its own application and governance layer; verify the required model and current terms before choosing.
Which parties receive prompts, outputs, and logs? Obtain current terms covering retention, training use, regions, and deletion.
Inspect PrivateStack's published data-handling summaryAsk each option's operator for a redacted request-log and export sample, its access model, and the configuration that produced them.
Use the audit-trail evidence checklistName who patches, monitors, handles incidents, approves support access, and controls network egress and encryption keys.
Use the deployment-boundary questionsCompare a dated written quote, the actual allowed model set, usage limits, and an export/exit exercise for the same workload. Do not assume that a historic plan or feature is currently available.
Prepare a vendor evidence requestThese links are supporting evaluation material, not independent proof that an option meets your requirements. Record the source, version, date, scope, and responsible reviewer for every purchasing conclusion.
Ask for the proposed configuration and a dated written scope before making a purchasing decision.