Security and data boundaries

Live
Define secret, network, provider, logging, and output-storage boundaries.
Open in ChatGPT
(opens in new tab)Last verified: 2026-08-11

Secret boundary

API keys belong in server-only secret storage. Proxy browser and mobile traffic through an authenticated application backend with user-level authorization and rate limits.

Data boundary

Minimize input data, understand the selected model/provider path, and store durable outputs in systems you control. Review Privacy, Data Retention, and Data Deletion.

Abuse controls

Validate file types and sizes, scan user-controlled URLs, constrain outbound fetches, and enforce the Acceptable Use Policy.
PreviousObservability
NextFAQ and support