Additional questions regarding security/privacy that seem to go beyond the nutrition label details

[LukePratherCUB]

The nutrition label for Smart Search is helpful, but it doesn't seem to answer some additional questions our security team has as we investigate the implications of this feature.

Broadly, I'm wondering if the overarching security/privacy policies and/or any other contractual agreements included in our Canvas contract apply to this new AI feature?

For example, if Canvas security documentation clarifies that data stored or processed for the core Canvas platform is encrypted at rest and in transit (https://www.instructure.com/trust-center/security) is that statement (and specific protocols, TLS 1.2 or higher, etc.) also true for the data stored or processed by this feature?

If all other security and privacy statements for Canvas are applicable or there are exceptions for this tool or other AI powered features, perhaps that's something to spell out more clearly in the nutrition label? 

Thanks for the additional clarification!

Luke

[bec_plumbe]

Disappointing that over 2 months later, this security question has not been addressed. @LukePratherCUB , have you considered picking this up with your account manager?

[LukePratherCUB]

Agree, it's unfortunate I wasn't able to get clarification in this forum. However, I did escalate through our CSM and they're helping track down the answers our review teams need to ensure AI features meet our security, privacy and accessibility concerns.

[b_w_reid]

Will you share any information via this page when you receive it, as we are also very interested in this as I'm sure are many other institutions.

[ken_i_mayer]

Yes! I came here because our CSM assured us that all the AI tools were covered under the data protection agreement already signed in our contract, but I wanted to find that statement in writing for our security team to approve these tools. And I haven't found anything that states it simply and clearly. Please let us know if anything is found. Or, Instructure, if you're listening, please direct us here to the exact language we need to get these tools approved!