At Nebius AI Studio, your trust is our top priority. We are committed to protecting your data, respecting your privacy, and operating in full compliance with applicable laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).This guide is designed to provide clear, plain-language answers to your most common questions about how we handle your data, where it is processed, and the rights and controls you have as a user.
To provide our service, we need to handle different types of data. It’s important to understand our role in each case:2.1. Data Controller: For your account information (e.g., email address, billing details), we act as the Data Controller, meaning we determine how this data is used for authentication and communication with you.2.2. Data Processor: For the content you submit to our model inference and fine-tuning endpoints via the API or web interface (prompts, datasets, etc.) and the output you receive, we act as the Data Processor under the terms set forth in our Data Processing Agreement (DPA). You are the Data Controller and remain in full control of this data.2.3. Speculative Decoding: To improve the output speed of our models, your input data (prompts) submitted to our platform and output data for those prompts may be stored and used for Speculative Decoding. However, you have complete control over this and can switch it off, which is explained in the next section.
Here’s how Speculative Decoding works and why we need your data: this feature speeds up inference by introducing a draft model. The draft model generates multiple candidate tokens, and the main model only verifies or corrects them. This reduces the number of expensive forward passes and improves throughput. While this is enabled by default for the best performance, you can opt out at any time by enabling the Zero Data Retention feature. Please be advised that enabling Zero Data Retention may impact the level of service provided.
You have direct control over how your API data is stored and used.3.1. Zero Data Retention (ZDR). For maximum privacy and control, you can enable the Zero Data Retention feature in your account settings.
What it means: When ZDR is enabled, your inputs (prompts) and outputs (responses) are not stored on our systems after the request is processed. This data is never used for model training or any other purpose.
How to enable it: You can activate Zero Data Retention in your account profile page.
3.2. Default behavior: Unless you enable Zero Data Retention, we keep your inputs and outputs to speed up inference using Speculative Decoding technique as specified in the section 2 above.
We understand that data residency is a critical requirement. To give you both choice and compliance, the processing location of your data depends on the AI model you select.4.1. Choice of Location: We offer models hosted in data centers both within the European Union (specifically, in Finland and France) and in the United States. The location of public model endpoints is fixed and cannot be changed. For dedicated endpoints, you may select or modify the data center (DC) location.4.2. Full Transparency: The hosting location for each model is clearly indicated in the Nebuis AI Studio interface and in its documentation. This allows you to see exactly where your data will be processed before you use a specific model, ensuring you can always make an informed and compliant choice.4.3. Future Changes: We are committed to providing advance notification of any changes to the hosting locations of our models.
5.1. GDPR Compliance: We are fully compliant with the General Data Protection Regulation (GDPR). Our practices and policies are built to meet these rigorous requirements for data protection.5.2. Data Processing Agreement (DPA): We provide a DPA to all our customers. To make the process simple and efficient, our DPA is incorporated directly into our Terms of Service. By signing up and agreeing to our Terms of Service, you are covered by our DPA. No separate signature is needed.You can review our contractual documentation here:
5.3. Certifications: We are a certified company holding ISO 27001, ISO 27701, and SOC 2 Type II certifications. These internationally recognized standards demonstrate our commitment to information security, privacy, and operational resilience.For more detailed information about our certifications and audit reports, please visit our Trust Center.
To ensure the safety and integrity of our platform, all content is subject to moderation in line with our policies. The Company reserves the right, and has absolute discretion, to remove, screen, or delete any of Your Inputs and Outputs at any time, for any reason, and without notice. For more detailed information contact our support team via email: ai-studio-support@nebius.ai.
Where is my data processed?
The processing location depends on the specific AI model you choose. We host models in data centers within the European Union (Finland and France) and the United States. You can see the specific location for each model in the Nebuis AI Studio before you use it.
How will I be notified about changes in model hosting locations?
We will announce such changes proactively via email to all account owners and through notifications within the Nebuis AI Studio platform.
If my data is processed in the US, how do you ensure it complies with EU regulations like GDPR?
For any data transfers to the US, we rely on legally established transfer mechanisms, such as Standard Contractual Clauses (SCCs), to ensure your data is protected to a standard equivalent to that of the GDPR.
Is my data used to train your AI models?
No, we don’t use your data to train any AI models. Your data is used only for speculative decoding, if you do not enable the “Zero Data Retention” feature.
What happens if I don’t enable “Zero Data Retention”?
Your API inputs and outputs may be stored and used for speculative decoding.
Are you GDPR compliant?
Yes. We are fully committed to and compliant with the GDPR.
Do I need to sign a separate Data Processing Agreement (DPA)?
No. Our DPA is an integral part of our Terms of Service. By agreeing to the ToS, you are automatically covered.
Who owns the content I generate or the models I fine-tune?
You do. You retain all intellectual property rights to your inputs, outputs, and any models you fine-tune or distill on our platform. You acknowledge that your outputs may be not unique and other users of Service may receive same or similar outputs.
