ClickUp — ai-addendum changed (low)

ClickUp updated its AI addendum, renaming the "Brain AI" product to "Brain" in its list of AI features and changing the heading "Countries with no Brain AI availability" to "Countries with no ClickUp AI availability." The addendum states ClickUp Brain and Super Agents use models from OpenAI (ChatGPT), Anthropic (Claude), and Google (Gemini), and that ClickUp has achieved ISO 42001 certification for managing AI responsibly and securely. ClickUp says its AI is not trained on Workspace data, citing zero data retention agreements with all partner LLM organizations and in-context learning to avoid retraining or fine-tuning models.

ClickUp's ai-addendum changed Search In this article Which AI models and versions does ClickUp use? Is my data used to train any AI models? What is in-context learning? Do you detect and defend against prompt injection? Is my data sent to third-party providers outside of ClickUp? What AI features can access connected apps? Does using Connected Search grant ClickUp AI access to the connected apps? Are the permissions set for connected applications respected when using Connected Search? How does ClickUp encrypt data? How are permissions respected when using @Brain? Can admins see what individual users ask Brain privately? Is ClickUp GDPR compliant? Where is ClickUp hosted? If a customer's data is hosted in the EU, will the data processed through ClickUp AI on their account also be processed in the EU? Who owns the data input into ClickUp AI? How do you ensure ClickUp AI is secure and consistent? Does ClickUp AI respect the user's role and permissions when responding? Is ClickUp AI HIPAA compliant? Is there human monitoring of ClickUp AI for performance and quality of output results? Does ClickUp AI provide transparent output through each stage of user interaction? How is bias detected and mitigated in ClickUp AI? Super Agent audit log REMOVEDCountries with no Brain AI availability These are frequently asked questions about the privacy and security of our ClickUp AI features . ClickUp AI refers to all of our AI features and interfaces, including Brain AI , Brain MAX , Autopilot Agents , and Super Agents . ADDEDCountries with no ClickUp AI availability These are frequently asked questions about the privacy and security of our ClickUp AI features . ClickUp AI refers to all of our AI features and interfaces, including Brain , Brain MAX , Autopilot Agents , and Super Agents . AI ISO certification We have achieved certification for ISO 42001, a rigorous standard for managing AI responsibly and securely. Contact sales@clickup.com for ClickUp's ISO certificates. ClickUp Brain and Super Agents use models from OpenAI ChatGPT , Anthropic Claude , and Google Gemini . In Brain, you can pick a supported external model or use ClickUp's recommended default, the model we've tuned for the best overall experience. You can switch models mid-conversation. For a Super Agent, pick a model or choose Auto to use the default. Models and versions change as providers release updates. The model selector shows what's available to your Workspace. Brain only uses Workspace data you can access. Connected Search follows the connected app's permissions. The context selector controls what's included in a request. Select a Workspace location, and any model you pick, including external models, can use the Workspace data you can access. To keep Workspace data away from an external model, select only external sources and don't ask about your Workspace. For example, if you're using Claude, don't select a Workspace location. Learn more about the AI model selector and context selector . ClickUp AI is not trained on data from your Workspace. We've secured licensing with our partners to ensure they do not access your data for training purposes. We also have zero data retention agreements with all of the large language model LLM organizations we partner with. The agreements require our partners not to retain any data from your Workspace after your data is input and processed through the LLM. Additionally, we use in-context learning ICL to ensure that our models are not learning from data. In-context learning ICL is a technique that allows large language models LLMs to generate appropriate responses when given context or examples within a prompt. This shows the model what to do without retraining or fine-tuning the model. For example, when asked a question like "What is our PTO policy?" ClickUp AI understands that it should search for PTO-related content in your Workspace. ClickUp AI analyzes the content and provides the most appropriate response. This allows ClickUp AI to assist you while never storing information from your Workspace. Yes, we separate user inputs from system prompts to ensure the large language model LLM recognizes that system prompt data is not meant as instructions. We conduct regular internal and external vulnerability testing across the platform with a focus on AI, following Open Worldwide Application Security Project OWASP guidelines. Our AI features sometimes need to share certain data with our partners. When we do need to share data with our partners, we ensure that only the necessary information is sent. Strict agreements with our partners ensure that your data is not used for training or retained in any capacity. It is deleted from their systems as soon as possible. For more detailed information, take a look at the following resources: Our Data Protection Addendum DPA . More information on how ClickUp performs vendor management can be found in Section 4.3. Third Party Services on the Security Policy page. You can see our full list of third-party providers on our Subprocessors page. Details on the security policies for the primary models used to build ClickUp AI are available on OpenAI's website . The websites for our external LLM partners can be found on our Subprocessors page. REMOVEDAutopilot Agents , Super Agents , and Brain AI . ADDEDAutopilot Agents , Super Agents , and Brain . ClickUp AI and Connected Search maintain the strict policies outlined in our Privacy and security article. By adding personal app knowledge to an Agent configuration, you expose the data from the connected app to anyone who can interact with the Agent. Read our article about tools from personal connections. Connected Search respects existing permissions for connected applications. We enforce role-based controls to keep access current and consistent. Take a look at our Connected Search article to learn more about the specific privacy and security measures we've implemented. Take a look at our Privacy and security article to learn more about the specific application security measures we've implemented. Take a look at the Access to private items section of our @mention Brain article for a thorough explanation of how permissions work when using @Brain. No. Private Brain conversations are visible only to the user who initiated them. All ClickUp plans meet the requirements of the current global data protection legislation, including: GDPR General Data Protection Regulation European Data Protection Legislation LGPD Brazilian General Data Protection Law CCPA California Consumer Privacy Act of 2018 as amended by the CPRA California Privacy Rights Act of 2020 VCDPA Virginia Consumer Data Protection Act Take a look at our Data Protection Addendum DPA to learn more. ClickUp is hosted entirely on Amazon Web Services AWS , providing end-to-end security and built-in privacy features. No. OpenAI, the subprocessor for ClickUp AI integrated with Chat-GPT, is located in the US. The websites for the external LLMs that can be accessed through ClickUp AI can be found on our Subprocessors page. ClickUp customers retain any ownership they have of their data, regardless of whether it is processed through a large language model LLM or not. Any data provided by a ClickUp customer that is sent to ClickUp's AI providers is covered by ClickUp's contract with that AI provider. ClickUp's contracts with AI providers prohibit ClickUp customer data from being used to train any AI model or from being retained by that model after processing. Any other questions specifically about data and ClickUp AI can be answered by our policy, ClickUp AI Additional Terms . ClickUp AI undergoes regular internal and external penetration testing to ensure security. We have an automated eval testing framework to ensure the behavior of ClickUp AI remains consistent. ClickUp AI has two main feature types: REMOVEDManual AI usage: For example, using our feature, Write with AI , or asking Brain AI questions. AskAI has access to the same information as the person using it. AI can't reveal anything that person can't otherwise access. ADDEDManual AI usage: For example, using our feature, Write with AI , or asking Brain questions. AskAI has access to the same information as the person using it. AI can't reveal anything that person can't otherwise access. AskAI has access to the same information as the person using it. AI can't reveal anything that person can't otherwise access. Automatic AI usage: This usage is configured by someone in your Workspace that happens automatically or autonomously. For example, AI Agents . ClickUp Agents respond based on their instructions and the knowledge they're given access to when configured. They respond in Channels, tasks, and other ClickUp items and locations as configured. If a user has access to the item or location but not all the agent's knowledge, they might see information in the response that they could not access otherwise. Learn how to configure Autopilot Agents and Super Agents . ClickUp Agents respond based on their instructions and the knowledge they're given access to when configured. They respond in Channels, tasks, and other ClickUp items and locations as configured. If a user has access to the item or location but not all the agent's knowledge, they might see information in the response that they could not access otherwise. Learn how to configure Autopilot Agents and Super Agents . REMOVEDClickUp can support HIPAA compliance for Enterprise customers by agreeing to a BAA Business Associate Agreement . Take a look at the Healthcare use section of ClickUp AI Additional Terms for our PHI Protected Health Information policies. ClickUp has BAAs currently in place with all large language models LLMs that we support in the ClickUp product. ADDEDClickUp can support HIPAA compliance for Enterprise and Max customers by agreeing to a BAA Business Associate Agreement . Take a look at the Healthcare use section of ClickUp AI Additional Terms for our PHI Protected Health Information policies. ClickUp has BAAs currently in place with all large language models LLMs that we support in the ClickUp product. We monitor daily for performance and reduced likes and dislikes. The only way for our engineers to access traces is when a user clicks the downvote icon on a ClickUp AI response. ClickUp AI's primary purpose is to answer questions within your organization. ClickUp AI provides sources for its answers to questions. This allows users to validate which sources are used to answer the questions. Bias is mitigated by the underlying provider. Details for ChatGPT integrated into ClickUp AI are available on the OpenAI website . The bias policies for the external LLMs that can be accessed through ClickUp AI are found on our partner's websites. Our partners' websites are listed on our Subprocessors page. There is a Super Agent audit log for troubleshooting and auditing purposes. There is also a Workspace audit log that records Workspace users' Super Agent activity. Use of ClickUp features may be restricted in certain jurisdictions due to local laws and regulations. REMOVEDBrain AI features are not available in the following countries: ADDEDClickUp AI features are not available in the following countries: Cuba Hong Kong Iran North Korea Russia Syria Can't find what you're looking for?