> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://typeform.ferndocs.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://typeform.ferndocs.com/_mcp/server.

# How AI Uses Your Data

Learn how Typeform AI processes and protects your data while delivering intelligent features.

## Data Processing Overview

**What AI Accesses**

* Form questions and structure
* Response data (when enabled for specific features)
* Usage patterns and metadata
* Performance metrics

**What AI Does NOT Access**

* Payment information
* Password or authentication data
* Data from forms where AI is disabled
* Personal data outside your account

## Data Privacy Principles

**1. Your Data Stays Yours**

* You own all form data and responses
* AI processing doesn't transfer ownership
* You can export or delete anytime

**2. No Cross-Account Learning**

* Your data never trains models accessible to other customers
* Each account is isolated
* No competitive insights shared

**3. Minimal Data Processing**

* AI only processes what's necessary for the feature
* Temporary processing for analysis
* Automatic deletion of processing artifacts

**4. Transparent Controls**

* Clear opt-in/opt-out for each AI feature
* Granular control at form level
* Audit logs available

## Third-Party AI Providers

Typeform uses industry-leading AI providers with strict data agreements:

**OpenAI** - Zero retention policy, SOC 2 Type II certified
**Google Cloud AI** - Data processing agreement, EU residency available
**Anthropic Claude** - No training on customer data, encryption at rest

All providers have Business Associate Agreements with contractual data protections.

## Your Controls

**Account Level**

* Enable/disable AI features globally
* Set data retention policies
* Choose data residency (US or EU)
* Export all AI interactions

**Form Level**

* Enable AI for specific forms only
* Exclude sensitive forms from AI
* Set permission levels
* Audit AI usage

**Respondent Level**

* Respondents can opt out of AI features
* Right to be forgotten honored
* Data deletion within 30 days

## Compliance

* **GDPR**: Full compliance, DPA available
* **CCPA**: California privacy rights honored
* **SOC 2 Type II**: Annual audits
* **ISO 27001**: Information security certified
* **HIPAA**: Available for healthcare (BAA required)

For more details, review our [Privacy Policy](https://www.typeform.com/privacy/) or contact [privacy@typeform.com](mailto:privacy@typeform.com)