Does the provider use your data to train future models? (Most enterprise agreements now include opt-out provisions, but read the terms carefully.) - Where is the data processed? (Relevant for GDPR, data residency requirements, and industry-specific regulations.) - Is the data encrypted in transit an