{"slug": "which-ai-agent-features-fall-outside-zero-data-retention", "title": "Which AI Agent Features Fall Outside Zero Data Retention", "summary": "A procurement census of 31 AI agent feature and delivery-surface combinations across Anthropic, OpenAI, Google, and AWS, read on September 9, 2026, finds that zero-data-retention (ZDR) eligibility varies by feature, with Anthropic's Messages feature conditionally eligible for ZDR while Files and Batch are not, and many contract and deletion paths remain unknown. The analysis urges buyers to evaluate retention and eligibility at the feature level rather than relying on broad provider labels.", "body_md": "A model can support a zero-data-retention arrangement while the agent feature around it stores sessions, files or memories. The purchase decision therefore belongs at the feature level. Start with the workflow you intend to run, identify every place it creates persistent state, and check each against the applicable provider arrangement.\n\nThis census records 31 feature and delivery-surface combinations across Anthropic, OpenAI, Google and AWS. It separates what provider documentation states from what remains unknown. It is a procurement reference, not a legal opinion or a certification that any deployment meets its obligations.\n\n1. 01A provider label is too broad.Messages, files, hosted sessions and tools can have different eligibility.\n2. 02State and abuse monitoring differ.Disabling response storage does not establish that every copy or log disappears.\n3. 03Deletion may require several operations.Session history, uploaded files and derived memories can have separate lifecycles.\n4. 04Unknown is a useful result.Ask the provider for a feature-specific answer instead of inferring it from a nearby service.\n\n## 01 — Practical decisionRetention and eligibility by feature\n\n**ZDR** means zero data retention under the provider’s defined arrangement. **BAA** means a HIPAA business associate agreement; **DPA** means a data processing agreement, with Google’s CDPA label retained where documented. Eligibility does not establish that your organization has executed the required agreement.\n\nRead the contract and deletion fields separately even where they share a column. “Conditional” requires the applicable account, model and feature settings. “Unknown” means the inspected source does not establish the field; it does not mean the provider has no agreement or deletion mechanism. Source letters resolve directly to provider pages.\n\n| Provider documentation linked in every cell, read September 9, 2026. This sample is not an exhaustive product inventory or a vendor ranking. |  |  |  | \n|---|---|---|---|\n| Provider / feature | ZDR eligibility | Retention window | Contract and deletion path | \n|---|---|---|---|\n| Anthropic / Messages [Source · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | Conditional [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | No conversation-content storage by default; exceptions below [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | **Contract:** HIPAA eligible; DPA unknown[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention)**Delete:** Unknown[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | \n| Anthropic / Files [Source · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | No [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | Until deletion or configured expiry [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | **Contract:** BAA no; DPA unknown[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention)**Delete:** Separate file deletion[M · Sep 9, 2026](https://platform.claude.com/docs/en/managed-agents/overview) | \n| Anthropic / Batch [Source · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | No [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | 29 days [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | **Contract:** BAA no; DPA unknown[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention)**Delete:** Account representative[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | \n| Anthropic / Web search, no dynamic filtering [Source · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | Conditional [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | Response handling [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | **Contract:** HIPAA eligible; DPA unknown[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention)**Delete:** Unknown[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | \n| Anthropic / Web fetch, no dynamic filtering [Source · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | Conditional [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | Response handling; publisher policies separate [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | **Contract:** BAA no; DPA unknown[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention)**Delete:** Unknown[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | \n| Anthropic / MCP connector [Source · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | No [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | Standard policy [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | **Contract:** BAA no; DPA unknown[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention)**Delete:** Account representative[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | \n| Anthropic / MCP tunnels [Source · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | No [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | Unknown [T · Sep 9, 2026](https://platform.claude.com/docs/en/agents-and-tools/mcp-tunnels/security) | **Contract:** BAA no; DPA unknown[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention)**Delete:** Archive tunnel; remove local credentials; data erasure unknown[T · Sep 9, 2026](https://platform.claude.com/docs/en/agents-and-tools/mcp-tunnels/security) | \n| Anthropic / Managed Agents sessions [Source · Sep 9, 2026](https://platform.claude.com/docs/en/managed-agents/overview) | No [M · Sep 9, 2026](https://platform.claude.com/docs/en/managed-agents/overview) | Stored session history/state/output [M · Sep 9, 2026](https://platform.claude.com/docs/en/managed-agents/overview) | **Contract:** BAA no; DPA unknown[M · Sep 9, 2026](https://platform.claude.com/docs/en/managed-agents/overview)**Delete:** Delete session; uploaded files separately[M · Sep 9, 2026](https://platform.claude.com/docs/en/managed-agents/overview) | \n| Anthropic / Scheduled deployments [Source · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | No: Managed Agents sub-feature [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) | Session data persists; run-record TTL unknown [A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention)[S · Sep 9, 2026](https://platform.claude.com/docs/en/managed-agents/scheduled-deployments) | **Contract:** BAA no; DPA unknown[A · Sep 9, 2026](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention)**Delete:** Archive stops schedule; delete sessions/files separately; record erasure unknown[S · Sep 9, 2026](https://platform.claude.com/docs/en/managed-agents/scheduled-deployments)[M · Sep 9, 2026](https://platform.claude.com/docs/en/managed-agents/overview) | \n| OpenAI API / Chat Completions [Source · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | Conditional [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | No ordinary state; abuse logs up to 30 days by default; exceptions apply [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | **Contract:** BAA conditional; DPA unknown[H · Sep 9, 2026](https://help.openai.com/en/articles/20001069)**Delete:** Unknown[O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | \n| OpenAI API / Responses foreground [Source · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | Conditional; store=false under ZDR [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | Default stored response ≥30 days [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | **Contract:** BAA conditional; DPA unknown[H · Sep 9, 2026](https://help.openai.com/en/articles/20001069)**Delete:** Unknown in inspected page[O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | \n| OpenAI API / Responses background [Source · Sep 9, 2026](https://developers.openai.com/api/docs/guides/background) | Permitted from ZDR projects; temporary storage [B · Sep 9, 2026](https://developers.openai.com/api/docs/guides/background) | Roughly 10 minutes with store=false [B · Sep 9, 2026](https://developers.openai.com/api/docs/guides/background) | **Contract:** Responses BAA conditional; DPA unknown[H · Sep 9, 2026](https://help.openai.com/en/articles/20001069)**Delete:** Automatic after temporary polling period[B · Sep 9, 2026](https://developers.openai.com/api/docs/guides/background) | \n| OpenAI API / Conversations [Source · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | No [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | Until deletion [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | **Contract:** Unknown[H · Sep 9, 2026](https://help.openai.com/en/articles/20001069)**Delete:** Deletion required; exact operation not checked[O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | \n| OpenAI API / Files [Source · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | No [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | Until deletion/expiry [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | **Contract:** BAA conditional; DPA unknown[H · Sep 9, 2026](https://help.openai.com/en/articles/20001069)**Delete:** API/dashboard; expires_after[O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | \n| OpenAI API / Batch [Source · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | No [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | Until deletion [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | **Contract:** BAA conditional; DPA unknown[H · Sep 9, 2026](https://help.openai.com/en/articles/20001069)**Delete:** Unknown in inspected page[O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | \n| OpenAI API / Live web search [Source · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | Tool-specific classification unknown [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | Tool-specific window unknown [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | **Contract:** BAA no; DPA unknown[O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data)**Delete:** Unknown[O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | \n| OpenAI API / Cache-only web search [Source · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | ZDR setup required for BAA path [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | Tool-specific window unknown [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | **Contract:** BAA conditional; DPA unknown[O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data)**Delete:** Unknown[O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | \n| OpenAI API / Remote MCP [Source · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | Third-party boundary [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | MCP operator policy [O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | **Contract:** Third-party agreement unknown[O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data)**Delete:** MCP operator; exact path unknown[O · Sep 9, 2026](https://developers.openai.com/api/docs/guides/your-data) | \n| OpenAI / Codex cloud [Source · Sep 9, 2026](https://learn.chatgpt.com/docs/enterprise/admin-setup) | Unknown [C · Sep 9, 2026](https://learn.chatgpt.com/docs/enterprise/admin-setup) | Unknown numeric window [C · Sep 9, 2026](https://learn.chatgpt.com/docs/enterprise/admin-setup) | **Contract:** BAA no; DPA unknown[H · Sep 9, 2026](https://help.openai.com/en/articles/20001069)**Delete:** Unknown[C · Sep 9, 2026](https://learn.chatgpt.com/docs/enterprise/admin-setup) | \n| Google Cloud / Plain model inference [Source · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | Conditional configuration and model [G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | Abuse/Advanced AI exceptions; inspect contract [G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | **Contract:** CDPA referenced; BAA unknown[G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention)**Delete:** Unknown[G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | \n| Google Cloud / Search grounding [Source · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | No for this feature [G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | Derived query/context logs ≤3 days [G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | **Contract:** CDPA referenced; BAA unknown[G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention)**Delete:** Logging cannot be disabled[G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | \n| Google Cloud / Maps grounding [Source · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | No for this feature [G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | Prompts/context/output 30 days [G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | **Contract:** CDPA referenced; BAA unknown[G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention)**Delete:** Logging cannot be disabled[G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | \n| Google Cloud / Live session resumption [Source · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | Disable resumption for ZDR [G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | Cached inputs/outputs ≤24 hours [G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | **Contract:** CDPA referenced; BAA unknown[G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention)**Delete:** Exact deletion operation unknown[G · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention) | \n| Google Cloud / Managed Agents preview [Source · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/interact-with-agents) | Unknown; confidential-data use prohibited [V · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/interact-with-agents) | Unknown numeric window [V · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/interact-with-agents) | **Contract:** Pre-GA restrictions; BAA/DPA unknown[V · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/interact-with-agents)**Delete:** Project deletion documented; individual record erasure unknown[V · Sep 9, 2026](https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/interact-with-agents) | \n| Gemini Developer API / Stored interactions (paid) [Source · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | Unknown program eligibility; stored state [I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | 55 days; configurable 7/14/28/55 [I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | **Contract:** BAA/DPA unknown[I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview)**Delete:** interactions.delete or AI Studio; expiry[I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | \n| Gemini Developer API / Stateless interactions [Source · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | Unknown program eligibility; store=false supported [I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | Interaction storage disabled; other retention unknown [I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | **Contract:** BAA/DPA unknown[I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview)**Delete:** No stored interaction; other deletion unknown[I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | \n| Gemini Developer API / Background interactions [Source · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | store=false incompatible [I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | Stored interactions follow tier policy [I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | **Contract:** BAA/DPA unknown[I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview)**Delete:** interactions.delete or AI Studio; expiry[I · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/interactions-overview) | \n| Gemini Developer API / Files [Source · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/files) | Unknown program eligibility; file storage required [F · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/files) | 48 hours [F · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/files) | **Contract:** BAA/DPA unknown[F · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/files)**Delete:** files.delete or automatic expiry[F · Sep 9, 2026](https://ai.google.dev/gemini-api/docs/files) | \n| AWS AgentCore / Runtime sessions [Source · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/data-protection.html) | Unknown [D · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/data-protection.html) | Data window unknown; microVM lifetime is separate [R · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-lifecycle-settings.html) | **Contract:** Service HIPAA eligible; BAA/DPA terms unknown[K · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/compliance-validation.html)**Delete:** Timeout terminates instance; session can resume[R · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-lifecycle-settings.html) | \n| AWS AgentCore / Short-term memory [Source · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-create-a-memory-store.html) | Unknown program eligibility; persistent events [W · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-create-a-memory-store.html) | Configured event retention ≤365 days [W · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-create-a-memory-store.html) | **Contract:** Service HIPAA eligible; BAA/DPA terms unknown[K · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/compliance-validation.html)**Delete:** DeleteEvent; derived long-term memory survives[E · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/short-term-delete-event.html) | \n| AWS AgentCore / Long-term memory [Source · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/data-protection.html) | Unknown [D · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/data-protection.html) | Unknown numeric window [W · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-create-a-memory-store.html) | **Contract:** Service HIPAA eligible; BAA/DPA terms unknown[K · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/compliance-validation.html)**Delete:** DeleteMemoryRecord separately[L · Sep 9, 2026](https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemoryRecord.html) | \n\n## 02 — Practical decisionRead the conditions before using an eligible feature\n\n[Anthropic’s eligibility documentation](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention) adds model-specific exceptions: Fable 5/5.1 and Mythos 5/5.1 require 30-day retention without express authorization. Search/fetch dynamic filtering is excluded from the eligible path. Flagged content may be retained up to two years, with legal exceptions. A feature-level yes cannot override those conditions.\n\n[OpenAI’s HIPAA guidance](https://help.openai.com/en/articles/20001069) requires an executed BAA and Modified Retention for covered API use unless specified otherwise. Codex cloud is excluded. The [API data-controls page](https://developers.openai.com/api/docs/guides/your-data) separately conditions the cache-only web-search BAA path on supported non-preview tooling, disabled external web access and ZDR at organization and project level.\n\nThese details change how a procurement question should be phrased. Ask whether the exact model, endpoint, tools and settings are covered by the proposed agreement. A response about the general API may be accurate while leaving the intended hosted feature unanswered.\n\nOur [Astra–Fable comparison](/blog/gpt-6-astra-vs-claude-fable-5-1-comparison) covers model selection. Use this feature census as a separate filter before running an evaluation with confidential material.\n\n## 03 — Practical decisionWhat stateful agents cost the reviewer\n\nPersistent state can be useful: it lets work resume, keeps files available and avoids asking the user to repeat context. The review cost is identifying which resources exist, who can access them, how long they remain and which operation removes them. That work is part of choosing the runtime.\n\n[Claude Managed Agents documentation](https://platform.claude.com/docs/en/managed-agents/overview) says the stateful service is outside current ZDR and HIPAA BAA eligibility. Session deletion and uploaded-file deletion are separate. The question for a buyer is whether that persistence fits an acceptable arrangement, not whether persistence is automatically disqualifying.\n\nThe current [OpenAI background-mode guide](https://developers.openai.com/api/docs/guides/background) permits requests from ZDR projects with store=false while retaining temporary polling data for roughly ten minutes. That is a specific documented exception to a literal expectation of no storage. Quote the behavior when assessing it rather than relying on an older blanket description of background mode.\n\nGoogle’s [managed-agent preview guide](https://docs.cloud.google.com/gemini-enterprise-agent-platform/build/managed-agents/interact-with-agents) restricts confidential input and commercial/production use. General cloud data-governance statements do not remove those preview restrictions. Our [Google managed-agent analysis](/blog/google-managed-agents-api-single-call) provides product context; the current feature terms decide the allowed use.\n\n## 04 — Practical decisionFollow deletion through the derived data\n\nDraw a simple resource list for a representative task: input request, session, uploaded file, tool result, memory, trace and export. Identify the owner and deletion operation for each. A request to delete the session should not be treated as proof that the other resources were removed.\n\nAWS [short-term event deletion documentation](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/short-term-delete-event.html) says deleting an event does not remove derived long-term memory. The latter has a separate [DeleteMemoryRecord operation](https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemoryRecord.html). Similarly, [runtime lifecycle limits](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-lifecycle-settings.html) describe instance lifetime, not a universal data-retention promise. A stopped process and erased data are different outcomes.\n\nInclude destinations outside the runtime. A remote tool may receive information under its own policy, and an exported trace may remain in your observability system. The provider’s deletion operation cannot establish what your own retained export contains. Keep the data-flow map narrow enough that an engineer can verify it.\n\nOur [agent runtime and sandbox matrix](/blog/agent-runtime-sandbox-matrix) helps identify execution boundaries. Add storage and deletion ownership to that runtime decision before calling the workflow ready for sensitive work.\n\n## 05 — Practical decisionTurn unknown cells into precise provider questions\n\nAn unknown cell should produce a question with a subject and a requested answer. For example: does this feature retain session content after an explicit delete request, and what documented window applies to primary copies and backups? Avoid asking whether the whole platform is compliant; that invites an answer too broad to settle the deployment.\n\nAttach the model ID, region, feature name and enabled tools to the question. Ask which contract covers the service and whether an eligibility exception requires approval. Request a source or written commitment that can be retained with the deployment record.\n\nFor implementation, test the operations available to you using non-sensitive sample data: create the resource, find it, delete it and confirm the visible result. Such a test can establish that the control works in your application. It cannot independently establish deletion of provider backups or other internal copies; those require the provider’s documented commitment.\n\nKeep the census at the same URL and re-check it when the provider changes a feature or your workflow adds a new destination. A table read today is evidence for today’s decision, not a permanent certification. Our [Claude Managed Agents update guide](/blog/claude-managed-agents-update-effort-webhooks-skills) illustrates how runtime features can change the scope of an earlier review.\n\nThis is a documentation comparison, not a hands-on performance test.\n\n- As-of date\n- September 9, 2026. Published September 8 as an editorial backfill; collection happened the following day.\n- Scope\n- Purposive census of 31 feature/surface rows across four providers, researched from 18 provider documentation pages. Each cell includes its source and read date. Conditional is not default eligibility; unknown is not a negative finding. Contract columns record documentation statements, not a signed agreement or legal assessment.\n- Refresh\n- Review after provider policy or model changes. Unknown marks information the cited documentation does not state.\n\n## 06 — Next stepWhat to do next\n\n### Choose the complete data path, not the model label.\n\nFilter the intended workflow by feature eligibility, retention behavior, contract and deletion path. Resolve consequential unknowns with the provider and preserve the answer with the deployment configuration. Stateful features can be a deliberate choice when their handling fits the requirement; a broad privacy label alone cannot establish that fit.\n\nOur [AI transformation services](/services/ai-transformation) help teams define a useful pilot, evaluate its results and turn the findings into an implementation decision.", "url": "https://wpnews.pro/news/which-ai-agent-features-fall-outside-zero-data-retention", "canonical_source": "https://www.digitalapplied.com/blog/ai-agent-platform-data-retention-eligibility-census", "published_at": "2026-09-08 00:00:00+00:00", "updated_at": "2026-09-09 08:31:13.596594+00:00", "lang": "en", "topics": ["ai-policy", "ai-products", "ai-tools"], "entities": ["Anthropic", "OpenAI", "Google", "AWS"], "alternates": {"html": "https://wpnews.pro/news/which-ai-agent-features-fall-outside-zero-data-retention", "markdown": "https://wpnews.pro/news/which-ai-agent-features-fall-outside-zero-data-retention.md", "text": "https://wpnews.pro/news/which-ai-agent-features-fall-outside-zero-data-retention.txt", "jsonld": "https://wpnews.pro/news/which-ai-agent-features-fall-outside-zero-data-retention.jsonld"}}