tegwick
c7a893f068
Introduces TPSC for tracking external service dependencies with GDPR
compliance maturity (CNIL/IAPP CMMI scale), pricing model, ToS, and
data retention information across all repos.
Primary data:
- canon/tpsc/{openai,anthropic,gemini,openrouter}-api.yaml — service definitions
- tpsc.yaml in each repo (llm-connect seeded with 4 services)
State-hub additions:
- Migration j7e8f9a0b1c2: tpsc_catalog + tpsc_snapshots + tpsc_entries
- api/models/tpsc.py, api/schemas/tpsc.py, api/routers/tpsc.py
- /tpsc/catalog/, /tpsc/ingest/, /tpsc/snapshots/, /tpsc/report/gdpr endpoints
- 4 MCP tools: register_service, list_services, ingest_tpsc_tool, get_gdpr_report
- scripts/ingest_tpsc.py + make ingest-tpsc[/-all] targets
- Dashboard: tpsc.md page + docs/tpsc.md
GDPR maturity scale: unknown | non_compliant | initial | developing | defined | managed | certified
Warnings triggered at: unknown, non_compliant, initial
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
25 lines
1022 B
YAML
25 lines
1022 B
YAML
slug: openai-api
|
|
name: OpenAI API
|
|
provider: OpenAI, Inc.
|
|
category: llm_inference
|
|
website_url: https://openai.com
|
|
pricing_model: usage_based
|
|
gdpr_maturity: developing
|
|
gdpr_notes: >
|
|
DPA available (Data Processing Addendum). Standard Contractual Clauses (SCCs)
|
|
provided for EU→US data transfers. Data is processed in the US.
|
|
Input/output retained up to 30 days for safety monitoring unless opted out
|
|
via the API zero-data-retention setting. Zero-data-retention is available
|
|
on eligible endpoints. Not suitable for sensitive personal data without a
|
|
signed DPA and explicit zero-retention configuration.
|
|
Reference: https://openai.com/policies/data-processing-addendum
|
|
dpa_available: true
|
|
tos_url: https://openai.com/policies/terms-of-use
|
|
privacy_policy_url: https://openai.com/policies/privacy-policy
|
|
data_processing_regions:
|
|
- us
|
|
data_retention_notes: >
|
|
Default: 30 days for abuse monitoring. Zero-data-retention available
|
|
on eligible API endpoints via opt-in. Training opt-out available.
|
|
status: active
|