Vendors · Questionnaire · Perplexity
Read Perplexity’s own answers to nine buyer questions
Perplexity API Platform. Each answer quotes Perplexity’s own page or feed as kept on the day shown. Each question cites the NIST text that asks it. The answers are not a score and not a verdict.
Perplexity in the vendor record perplexity-questionnaire.csv
Q1
Does the vendor train its models on business and API customers’ data?
NIST AI 600-1, action GV-6.2-007: “… contribute to unauthorized data collection by vendors or third-parties (e.g., secondary data use) …”
NIST AI RMF 1.0, MEASURE 2.10
Not by default
No training by default: Under the API Terms of Service, Perplexity does not use Customer Content to train generative AI models. Certain APIs may be subject to product-specific terms.
API Privacy & Security, kept 26 Oct 2026 · sha256 9ee8051da300
Q2
Does the vendor train its models on free and consumer use of its products?
NIST AI 600-1, action GV-6.2-007: “… contribute to unauthorized data collection by vendors or third-parties (e.g., secondary data use) …”
NIST AI RMF 1.0, MEASURE 2.10
Not read
The vendor record does not read this point for Perplexity.
Q3
How long does the vendor keep the data that customers send?
NIST AI 600-1, action GV-6.1-004: “Draft and maintain well-defined contracts and service level agreements (SLAs) that specify content ownership, usage rights, quality standards, security requirements, and content provenance expectations for GAI systems.”
NIST AI RMF 1.0, MEASURE 2.10
Not published in the pages kept
Searched: API Privacy & Security; Rate Limits & Usage Tiers. Not kept, so not searched: Privacy policy; Enterprise terms of service.
Q4
Can a customer have the vendor keep none of its data?
NIST AI 600-1, action GV-6.1-004: “Draft and maintain well-defined contracts and service level agreements (SLAs) that specify content ownership, usage rights, quality standards, security requirements, and content provenance expectations for GAI systems.”
NIST AI RMF 1.0, MEASURE 2.10
Zero Data Retention, for eligible customers by written agreement
ZDR is available only to eligible customers through an account-level configuration under a written agreement with Perplexity.
Not every model supports it: “Some providers require limited retention as a condition of offering their models.” API Privacy & Security, kept 26 Oct 2026 · sha256 9ee8051da300
Q5
Where does the vendor process and store customer data?
NIST AI 600-1, action GV-6.1-009: “Update and integrate due diligence processes for GAI acquisition and procurement vendor assessments to include intellectual property, data privacy …”
NIST AI RMF 1.0, GOVERN 6.1
Not published in the pages kept
Searched: API Privacy & Security; Rate Limits & Usage Tiers. Not kept, so not searched: Privacy policy; Enterprise terms of service.
Q6
Which other companies process customer data for the vendor?
NIST AI 600-1, action GV-6.1-007: “Inventory all third-party entities with access to organizational content and establish approved GAI technology and service provider lists.”
NIST AI RMF 1.0, GOVERN 6.1; NIST AI RMF 1.0, MANAGE 3.1
Listed on its Trust Center
Personal data: Perplexity processes personal data in accordance with its Data Processing Addendum, and information about subprocessors is available on Perplexity’s Trust Center.
API Privacy & Security, kept 26 Oct 2026 · sha256 9ee8051da300
Q7
Which independent audits or certifications does the vendor name?
NIST AI 600-1, Appendix A.1.3: “statement on standards for attestation engagement (SSAE) reports to help with third-party transparency and risk management for GAI systems”
NIST AI RMF 1.0, GOVERN 6.1
SOC 2 Type II
SOC 2 Type II Report - Comprehensive security controls audit covering security, availability, processing integrity, confidentiality, and privacy
The same list names a “2025 HIPAA Gap Assessment” and “CAIQlite”. API Privacy & Security, kept 26 Oct 2026 · sha256 9ee8051da300
Q8
Does the vendor publish a history of its service incidents?
NIST AI 600-1, action GV-6.2-007: “Service Level Agreements (SLAs) in vendor contracts that address incident response, response times, and availability of critical support.”
NIST AI RMF 1.0, GOVERN 6.2
Yes: a status history feed, with 10 incidents kept since 2026-08-06
Status history feed, kept 1 Nov 2026 · sha256 14181e2ab584. The record.
Q9
Does the vendor publish the dates on which it retires its models?
NIST AI 600-1, action GV-6.2-007: “Review vendor contracts and avoid arbitrary or capricious termination of critical GAI technologies or vendor services …”
NIST AI RMF 1.0, GOVERN 6.2
Not read
Perplexity is an AI application; this site reads model retirement pages of model makers and clouds only.
- Perplexity, API Privacy & Security, kept 26 Oct 2026.
- Perplexity, Status history feed, kept 1 Nov 2026.
- NIST, NIST AI 600-1, 2024-07. Republished courtesy of the National Institute of Standards and Technology.