faq/security.md +14 −0
57* **Response header:** every API response includes an `x-zero-data-retention` header set to `"true"` or `"false"`, so your application can programmatically confirm whether ZDR is active.57* **Response header:** every API response includes an `x-zero-data-retention` header set to `"true"` or `"false"`, so your application can programmatically confirm whether ZDR is active.
58* **Audit logs:** administrative events (key creation, team changes, etc.) still appear in the Console audit log, but the content of API requests and responses does not.58* **Audit logs:** administrative events (key creation, team changes, etc.) still appear in the Console audit log, but the content of API requests and responses does not.
59 59
60## Grok Build CLI
61
62If you are using the Grok Build CLI with ZDR enabled, no trace or code data is retained.
63
64When using the Grok Build CLI without ZDR, privacy settings are available as a slash command (`/privacy`) and in settings (`/settings`). You can disable code data retention with these settings, even if ZDR is not enabled.
65
66On using the Grok Build CLI, you will also see a screen to allow us to retain data to improve the product and model. We will also provide a setting to change your choice.
67
68## Grok.com Build mode
69
70If you are using the Build mode in grok.com or via the mobile apps, chats and build sessions are retained for product functionality in order to allow developing and publishing apps across multiple sessions. Unlike for regular chat, Private Chats on grok.com and mobile are not available for Build mode currently to ensure publishing and building apps across multiple sessions is possible.
71
72If the "improve the model" toggle is enabled from grok.com or mobile data controls settings, these chats via Build mode and build sessions, including data from created apps, may be used for product and model improvements.
73
60## Is the xAI API HIPAA compliant?74## Is the xAI API HIPAA compliant?
61 75
62To inquire about a Business Associate Agreement (BAA), please complete our [BAA Questionnaire](https://x.ai/legal/baa). A member of our team will review your responses and reach out with next steps.76To inquire about a Business Associate Agreement (BAA), please complete our [BAA Questionnaire](https://x.ai/legal/baa). A member of our team will review your responses and reach out with next steps.