# AI data processing addendum review brief

Use this brief to align legal, security, procurement, and delivery teams on how AI systems process customer data. Keep the review tied to real workflows: what data enters prompts, what sources are retrieved, what logs are retained, and which providers can process or store information.

## Review sections

- Data classes and processing purpose.
- Regional routing and residency assumptions.
- Retention, deletion, and export obligations.
- Subprocessor and model-provider evidence.
- Incident notice, audit, and customer-control commitments.