Additional questions regarding security/privacy that seem to go beyond the nutrition label details

LukePratherCUB
Community Member

The nutrition label for Smart Search is helpful, but it doesn't seem to answer some additional questions our security team has as we investigate the implications of this feature.

Broadly, I'm wondering if the overarching security/privacy policies and/or any other contractual agreements included in our Canvas contract apply to this new AI feature?

For example, if Canvas security documentation clarifies that data stored or processed for the core Canvas platform is encrypted at rest and in transit (https://www.instructure.com/trust-center/security) is that statement (and specific protocols, TLS 1.2 or higher, etc.) also true for the data stored or processed by this feature?

If all other security and privacy statements for Canvas are applicable or there are exceptions for this tool or other AI powered features, perhaps that's something to spell out more clearly in the nutrition label? 

Thanks for the additional clarification!

Luke