Help Center/ MaaS/ Security and Compliance/ Data Processing and Privacy Commitment
Updated on 2026-09-20 GMT+08:00
View PDF
Share

Data Processing and Privacy Commitment

What Is Data?

Data of users in MaaS includes AI data released by users and personal data provided by users.

AI data includes but is not limited to text, graphics, articles, photos, images, illustrations, code, AI algorithms, and AI models.

Personal data includes:

  • Nickname, profile photo, email address, and mobile number for account registration.
  • Enterprise information for account registration.
  • Huawei Cloud account ID, email address, and enterprise information provided when a user applies for the whitelist.

Data Processing

MaaS centrally stores and manages AI data released by users. File data is stored in the official MaaS OBS bucket. Personal data provided by users is stored in the database, and sensitive information (such as mobile numbers and email addresses) is encrypted in the database.

MaaS provides a data and privacy protection statement, which guarantees the following aspects. For details, see MaaS Service Agreement.

Table 1 Data processing and privacy commitment items

Commitment

Description

Data not used for training

Your content (including prompts and model outputs) will not be used for model training or optimization without your explicit authorization.

No caching, storage, or retention

User input data is not cached, stored, or retained. Inference interaction data is only processed and not stored. The data is deleted immediately after the service is complete.

Data processing and cross-border transfer policies

For enterprise users outside the Chinese mainland, you can access the service from the CN-Hong Kong region. The information processed outside the Chinese mainland includes only the following three items: enterprise account ID, registration location, and VIP level. It does not involve personal identity information (such as mobile numbers and personal accounts). The interaction data is only processed and not stored. The data is deleted immediately after the service is complete.

No disclosure to third parties

Except for providing the service, we will not authorize or disclose your content to third parties without your explicit consent.

Compliance review right

Huawei Cloud has the right to manually or technically review the security compliance of your content. Any non-compliant content may be handled (disclosed, deleted, or blocked).

Protection of static data

With your consent, MaaS encrypts sensitive information in the user data it collects, such as email addresses and mobile numbers, using the AES algorithm in the database.

Data isolation mechanism

Data is stored and isolated by tenant. Tenants cannot view each other's data. You can use the tenant account to grant different service space permissions to different IAM accounts. Data in different service spaces is isolated from each other.

Security Guidelines for Users

  • You are responsible for the security compliance of your content (including prompts and model outputs), and must ensure that your content does not contain pornographic, violent, or drug-related information.
  • Ensure that the content source is legal and does not infringe on others' intellectual property rights, trade secrets, or personal information.
  • If the content contains personal information, the information must be anonymized or the corresponding authorization must be obtained.
  • You are responsible for the model's outputs and usage behavior, and should carefully evaluate them prior to commercial use.
  • If the service has the public opinion attribute or social mobilization capability, you should carry out security assessment and algorithm archiving in accordance with laws and regulations.

FAQs

Q1: Does MaaS store data generated during model calls?

Huawei Cloud strictly protects data privacy, and will not use your data for model training or optimization. The inference interaction data is only processed, and is not stored. It is deleted immediately after the service is complete. According to relevant laws and regulations, the management plane operation records (such as API key creation, deletion, and editing) are retained by CTS for audit and tracing, and the call statistics (not the content itself) are retained by Cloud Eye for monitoring and query.

Q2: Are there any content and privacy security issues in cache hits?

The MaaS inference pipeline does not cache, store, or retain user input data. The data is deleted immediately after the service is complete. Therefore, there is no risk of content or privacy leakage caused by cache hits based on your input. If you deploy cache on your own side (such as application gateway and CDN), you should set the cache layer to not cache sensitive content or isolate sensitive content based on permissions.