No, our proprietary AI models are trained on each specific customer’s dataset only. This allows the Conga solution to provide recommendations which are specific to each individual customer and each individual customer’s business case.  

When enhancing our proprietary models, we will often review those enhancements across different customer datasets to validate the model is handling unique data conditions accurately. However, this will not involve the sharing of data across customer environments.  

In summary:  
 

• your data will NOT be shared with other Conga customers;  
• your data will only be used to train your specific model;  
• model training takes place within your environment and is not shared or used to train models for other customers;
• models trained on your data will NOT be used to score or provide recommendations to other Conga customers; and
• Conga customers will NOT have access to or benefit from any other customer’s trained model. Separately, Conga may collect anonymized, aggregate usage information ("Service Attributes"), such as feature usage patterns and interaction data, for purposes including analytics, benchmarking, and improving Conga's services. Service Attributes are fully anonymized and aggregated so that they cannot identify you, your users, or your content. Service Attributes are not Customer Data and are not used to train customer-specific models. For full details, see Conga’s AI Addendum. 
   

We leverage the Microsoft Azure OpenAI Service to power our AI Agents. These Agents, including any token inputs, do not alter or train any back-end LLMs.  

Your prompts (inputs), completions (outputs), embeddings, and training data:  
 

• are tokenized before transmission to and from Azure OpenAI Service;  
• are NOT available to other customers;  
• are NOT available to OpenAI;  
• are NOT used to improve OpenAI models; and  
• are NOT used to improve any Microsoft or 3rd-party products or services.  
   

The Azure OpenAI Service is fully controlled by Microsoft; Microsoft hosts the OpenAI models in Microsoft’s Azure environment and the Azure OpenAI Service does NOT interact with any services operated by OpenAI (e.g. ChatGPT or OpenAI API). 

Conga’s Discovery Agent and Q&A Agent use a small number of specialized third-party services for document processing, including Google Cloud Vision (OCR), AWS Textract (table detection), Zuva (provision extraction), and Azure OpenAI (language model processing). Conga enforces a zero-data-retention policy with each of these providers: your documents are processed in real time and are not stored or retained after processing is complete. 

Any data used to train AI models or facilitate AI Agent workflows will have the same protections as Customer Data in our Subscription Services. Conga maintains a comprehensive, written information security program that contains administrative, technical, and physical safeguards designed to ensure that Customer Data remains secure and is handled in compliance with all regulatory requirements applicable to Conga and the Subscription Services. For more details, refer to Conga’s Data Security Exhibit.

Conga’s commitment to compliance with applicable laws and regulations is documented in your Master Services Agreement with Conga. Conga’s AI features are developed with privacy and security in mind, ensuring Conga’s compliance with its regulatory requirements as an AI system provider and a data processor. Please reach out to Conga if you require any assistance or have any further questions regarding how we ensure compliance with our regulatory obligations. 

Depending on the Conga product and features, our products qualify as either minimal or limited risk AI systems under the EU AI Act. 

If you are an existing customer, please reach out to your customer success manager with any questions or concerns. If you are new to Conga, please contact us here.