AI Data Privacy Audit

ai-data-privacy · v1.1.0 · paid

Data handling assessment across the AI processing pipeline, covering storage, retention, PII protection, and user control over third-party model data sharing.

Data Collection & Consent

data-collection-consent · weight 0.3

Explicit user consent before AI processing
ab-000155
critical
Privacy policy discloses AI data processing
ab-000156
high
Granular AI feature opt-in controls exist
ab-000157
medium
AI processing indicator shown to users
ab-000158
low
AI accuracy disclaimer present
ab-000159
info

PII Protection

pii-protection · weight 0.25

PII is redacted or screened before AI API calls
ab-000160
critical
No PII or prompt content in application logs
ab-000161
high
Data minimization — only necessary context sent to AI
ab-000162
medium
System prompt includes PII safety instructions
ab-000163
low
UI warns users not to enter sensitive data
ab-000164
info
PII detection library or pattern coverage present
ab-000165
info

Data Retention & Deletion

data-retention-deletion · weight 0.25

Automated retention policy for AI conversation history
ab-000166
high
User can delete their AI conversation history
ab-000167
medium
AI conversation data stored separately from core user data
ab-000168
low
Account deletion cascades to AI conversation data
ab-000169
info
AI response metadata stored for audit trail
ab-000170
info

Third-Party AI Provider

third-party-ai-provider · weight 0.2

AI provider API calls use encrypted transport
ab-000171
critical
No user data sent to external error reporting services
ab-000172
high
AI training data opt-out is configured
ab-000173
medium
No wildcard request body logging for AI calls
ab-000174
low