Modal

Modal does not store ordinary endpoint payloads or train on Customer Data without written consent.

Plan Scope

Modal serverless compute and Modal-hosted inference endpoints; Functions, endpoints, logs, volumes, and snapshots have different retention.

Prompt Retention

Server and inference endpoint request payloads are not stored and are proxied to the customer's container. Function arguments and return values can be retained encrypted for up to seven days.

Response Retention

Endpoint responses are not stored; Function return values can remain up to seven days. Customer-created volumes and images persist until deleted.

Ordinary Logging

App and container logs persist one day on Starter, 30 days on Team, and per contract on Enterprise; account and resource metadata persists for the account lifetime.

Model Training

Modal contractually says it will not train an AI model on Customer Data or export it into an LLM without prior written customer consent.

Product Improvement

Modal collects aggregate de-identified operational data, but Customer Data is licensed only as necessary to provide the service and is excluded from model training without consent.

Human Or Operator Access

Modal says it will not access code, function inputs or outputs, or stored customer data. Logs and metadata are accessed only with customer permission for troubleshooting, subject to service/security exceptions in the terms.

Subprocessors And Routing

Modal pools compute across cloud providers and lists AI-tool subprocessors under its DPA; customers can select processing regions.

Deletion Controls

Inference endpoint payloads are never written to disk; function data expires within seven days; volumes and images persist until customer deletion; portability and erasure requests are supported.

Caveat

Modal is infrastructure, so code deployed by the customer can itself save or forward prompts. The endpoint ZDR statement covers Modal's proxy, not application-level logging inside the container.