Skip to main content

​
What Together stores

By default, Together stores the prompts you send and the responses models return, and may use them for product improvements. This data is not shared with third parties, and you can delete it at any time. Organization admins can turn storage off in privacy settings, which enables zero data retention (ZDR): request content is then not persisted or used for any secondary purpose. See zero data retention for what ZDR covers, how to enable it, and what Together retains.

​
Training opt-in

Data sharing for training other models is opt-in and not enabled by default. Check or change this setting in the Privacy section of Organization Settings. See the privacy policy for the full legal picture.

​
Organization privacy settings

Organization-level privacy toggles live on the main Organization Settings page under Privacy. Only organization admins can change them:
  • Store prompts and model responses: on by default. Stores prompts and outputs for product improvements. Turn it off to enable zero data retention, which also turns off passthrough models because they require prompt storage.
  • Allow organization’s data for training: off by default. Opt in to using your organization’s data for training models released by Together AI and partners.
  • Allow passthrough models: on by default. Allows models that forward prompts and responses to third-party providers (see below).
If your organization is on the Limited tier, add a payment method before updating these settings.

​
Account vs. organization settings

You may see a privacy toggle on both your personal account profile and your organization settings. These control different scopes:
  • The account setting applies only to traffic you send under your personal account when it isn’t attached to an organization.
  • The organization setting governs all traffic sent under that organization’s projects and API keys, regardless of which member makes the request.
When a request uses an organization’s API key, the organization setting is what applies. To turn data sharing off for your team, change it in organization settings, not on your personal profile.

​
Passthrough third-party models

Some models are offered as passthrough, meaning that Together forwards your prompts and responses directly to the upstream provider, and data is handled under that provider’s own data policy. Passthrough is controlled by a separate organization-level toggle (“Allow my organization to use passthrough models…”) and is independent of the training opt-in above. If you do not want any traffic leaving Together’s infrastructure, turn that toggle off, and non-passthrough models will continue to work as normal.

​
Enterprise data residency and private networking

For customers with data-residency, regulatory, or compliance requirements (for example, GDPR-driven EU-region deployments), Together supports private networking and VPC-based deployments, including in EU regions. Serverless endpoints do not offer region selection; use a dedicated endpoint or contact us to discuss the right setup for your workload. For the full legal picture, see the privacy policy.

​
Vulnerability disclosure

Together AI accepts security vulnerability reports through its HackerOne program. The program is private, so viewing it and submitting reports requires a HackerOne account. Program details are published in the standard security.txt file. If you believe you’ve found a security issue, submit it through HackerOne rather than a support ticket.

​
Third-party model providers

Models published by third-party authors (DeepSeek, Qwen, Mistral, etc.) and hosted on Together run on Together’s own infrastructure. They do not call out to the model author. The model author has no access to your requests or API calls. For example, DeepSeek models are hosted in Together’s secure North America data centers. DeepSeek itself receives no user requests or API traffic from this deployment. Models on Together are hosted at full precision. Together does not distill them, force system prompts, or layer censorship on top. The version you call is the version the model author published.