Skip to primary content
Glossary Definition

What Is Zero Data Retention (ZDR)?

Reviewed by Umar Abbas • CTO & Principal AI Architect

Zero Data Retention (ZDR) is a contractual and architectural privacy policy guaranteeing that cloud artificial intelligence API providers do not log, persist, or retain customer prompt payloads, document inputs, or model completion outputs on physical disk. Under ZDR, data exists strictly in volatile RAM memory during real-time inference.

CategoryGovernance & Security
Storage PolicyVolatile RAM Only
Audit StandardsHIPAA BAA & SOC 2
Training Policy0% Model Retraining
Mechanism & Workflow

How Zero Data Retention Functions

Under standard cloud API connections, requests are logged to disk for 30 days for abuse monitoring. Under Zero Data Retention, logging pipelines are disabled at the API gateway layer. Input payloads are held in volatile RAM during transformer inference and flushed immediately upon returning the final token stream.

Zero Data Retention Request Memory Lifecycle
1. TLS RequestEncrypted Transport
2. Volatile RAMZero Disk Persistence
3. Stream ResponseSub-200ms Delivery
4. RAM FlushImmediate Memory Purge
Concrete Production Example

Healthcare Clinical EHR Summarization Pipeline

In our healthcare AI deployments, we process patient EHR records through AWS Bedrock ZDR endpoints under an executed HIPAA Business Associate Agreement. Clinical notes are summarized in volatile memory without PHI disk persistence.

Production Compliance Specs
  • Framework: AWS Bedrock Claude 3.5 Sonnet ZDR instance.
  • Encryption: KMS customer-managed key wrapping payload in transit.
  • Audit Log: AWS CloudTrail confirming zero S3 or DynamoDB log storage.
Technical Comparison

Zero Data Retention vs. Standard Cloud API Terms

DimensionZero Data Retention (ZDR)Standard Commercial Cloud API
Disk Persistence0 Days (Volatile RAM memory flush only)30 Days (Disk logging for abuse monitoring)
Regulatory ComplianceEligible for HIPAA BAA & SEC 17a-4 complianceNon-compliant for PHI / PII handling without addendum
Model Training UseContractually and technically prohibitedOpt-out required to prevent training inclusion
Configuration RequirementEnterprise contract flag or private VPC deploymentDefault setting on standard developer API keys
Decision Framework

When to Mandate Zero Data Retention

Mandate ZDR When:
  • Processing Protected Health Information (PHI) under HIPAA regulations.
  • Handling financial account numbers, credit card tokens, or SEC-restricted data.
  • Deploying enterprise AI for defense, legal, or government clients.
Do NOT Rely Solely On:
  • Verbal vendor promises without signed Business Associate Agreements.
  • Standard consumer web interfaces where chat history is stored by default.
Buyer FAQ

Frequently Asked Questions

What is the difference between standard API data terms and Zero Data Retention?

Standard API terms may store request logs for 30 days for abuse monitoring; Zero Data Retention explicitly disables disk logging, flushing memory immediately after response streaming completes.

How do enterprises verify Zero Data Retention compliance?

Verification requires executing formal enterprise Business Associate Agreements (BAA), reviewing SOC 2 Type II audit logs, and configuring enterprise cloud endpoints (e.g. AWS Bedrock or Azure OpenAI ZDR instances).

Are customer prompt payloads used to train public foundation models under ZDR?

No. Zero Data Retention legally and technically prohibits AI vendors from utilizing API request or completion data for foundation model training or weight updates.

Can ZDR be achieved using self-hosted open-weights models?

Yes. Deploying open-weights models (e.g. Llama 3 via vLLM) inside a private VPC guarantees 100% on-premise zero data retention under direct organizational control.