AI models and providers
Windmill uses state-of-the-art AI models from trusted providers: These models power Windy, our AI agent, to help with feedback collection, 1:1 preparation, performance review drafting, and more. Zero data retention Windmill has zero data retention enabled across all AI model providers. This means:- Your data is not stored by our AI providers after processing
- API calls are processed and immediately discarded
- No logs or caches of your data are retained by OpenAI, Anthropic, or Google
Zero data retention ensures that your company’s data never becomes part of AI provider training datasets or storage systems. In the future, if we choose to use other model providers, we only use providers that support zero data retention policies.
AI security controls
AI features follow the same access controls as the rest of Windmill. Windy cannot retrieve or use content that the requesting member cannot access. Windmill application services enforce these permissions; permission decisions are never delegated to AI models. Company isolation Search indexes and embeddings are isolated by company. Windmill checks resource-level permissions when it retrieves content. Embeddings are encrypted at rest and deleted with their linked source data. Controlled actions Windy uses defined tools with validated inputs. Model-generated requests remain subject to the same permissions as the member making the request. Windy does not execute model-generated code, browse the internet, or modify external systems. Output handling Windmill validates tool inputs and sanitizes AI-generated web content before it is displayed or used in an action.Data retention
Windmill retains data from customers as long as they have an active engagement with Windmill. Customers have the right to request complete data deletion after ending an engagement.Telemetry
Zero data retention applies to our AI model providers. Windmill records AI inputs, outputs, and tool activity as product telemetry. Access is limited to authorized personnel and is protected by audit logs. Customers can request AI interaction and tool activity logs for their Windmill environment for audit or export.Model training
Our AI model providers do not train on your data. They operate under zero data retention.- Windmill does not build or train general-purpose AI models from customer data
- Windmill may use anonymized customer data to improve its own models. Before use, we remove all information that could identify a customer, individual, or situation
- These models are used only to operate and improve Windmill. We never offer them as a service to other parties
- You can opt out at any time. Email support@gowindmill.com, and we will confirm it in writing
Your data stays your data. Anonymized data never contains information that could identify a customer, individual, or situation.