Azure OpenAI data safety - how is metadata of the model/deployment/solution stored and secured. Metadata, not data.

Question

If there is a crash of an instance in the OpenAI service, do you create dumps and are they analyzed outside of the Geo?

Is there a definition of meta-data that is visible for Azure?

What is the log retention of the services behind the service we have visible and control about (i.e. internal logs)?

For how long is information visible in your system after deletion / data zeroing? Are there exceptions?

You write in your description "Microsoft doesn’t see or extract your keys." But are they technically available? What are the measures behind this?

Answer 1

@ankubasi You can configure Azure Monitor to generate data in activity logs, resource logs, virtual machine logs, and platform metrics. For more information, see Monitoring data from Azure resources.

Platform metrics and the Azure Monitor activity log are collected and stored automatically. This data be routed to other locations by using a diagnostic setting. Azure Monitor resource logs aren't collected and stored until you create a diagnostic setting and then route the logs to one or more locations. See the monitoring page for more details.

Metadata attached to your deployments is data of your resource. Hence, it is treated by the same terms as other data related to your resource. As mentioned in the data privacy page.

Azure OpenAI stores and processes data to provide the service and to monitor for uses that violate the applicable product terms. Please also see the Microsoft Products and Services Data Protection Addendum, which governs data processing by the Azure OpenAI Service except as otherwise provided in the applicable Product Terms.

If you enable diagnostic monitoring for your resource, you can control resource logging and its storage depending on the configuration chosen. If you delete your resource all information of the resource is deleted.

With respect to recovering deleted resource, Azure OpenAI follows the same practice as other AI services offered by Azure. Please see this page for details. The current message seen while deleting the resource also indicates that the resource cannot be recovered after 48 hours.

For information about microsoft managed keys, please see this page on encryption and management. Thanks!!

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.