OpenAI wants to get better at spotting people abusing its frontier AI models without asking privacy-conscious customers to give up Zero Data Retention. In an August 19 announcement, OpenAI introduced Private Safety Processing, a system designed to detect suspicious behavior across multiple interactions while preserving ZDR for eligible API customers.
OpenAI says its existing ZDR safeguards evaluate requests individually, making patterns spread across several interactions harder to detect. Private Safety Processing is supposed to fill that gap without giving OpenAI employees access to the underlying prompts or responses.
For now, the system is being tested with early customers. Axios reports that it’s aimed at enterprise and API customers rather than individual ChatGPT subscribers.
How does Private Safety Processing work
Instead of inspecting one request at a time, the system can look for suspicious patterns across related interactions. When it detects possible misuse, OpenAI receives a limited signal about the activity rather than the customer’s underlying content.
With Zero Data Retention deployments, that content stays on infrastructure controlled by the customer. OpenAI is also developing another setup where encrypted content can live on its infrastructure while customers hold the encryption keys. OpenAI itself wouldn’t possess those keys.
Why Anthropic chose another route
Anthropic has made a different tradeoff. For its Covered Models, prompts and outputs are retained for 30 days, including for organizations that previously used Zero Data Retention. Anthropic says that window helps its safeguards catch attacks that only become apparent across multiple requests.
OpenAI is trying to solve the same safety problem while keeping ZDR intact for eligible customers. For businesses that adopted ZDR specifically to limit how long an AI provider can hold their content, those are materially different propositions.
What zero retention still leaves out
Private Safety Processing is still an early preview, and OpenAI hasn’t yet publicly demonstrated that it can provide abuse detection equivalent to approaches that retain customer content. The technical details behind those privacy protections also aren’t public yet.
There’s an explicit exception. OpenAI says images flagged as potential child sexual abuse material can still be retained for legally required manual review and reporting, even under Zero Data Retention.
OpenAI plans to begin rolling out Private Safety Processing and publish a technical white paper in September. That should give customers a much better idea of whether cross-session safety monitoring can work without weakening the existing ZDR protections they rely on.
