Backfrom xAI’s own policies · verified 2026-10-14 · some facts not published
xAI: data residency & retention
Headquarters
🇺🇸 United States (US)
Where inference runs
US
The global endpoint (api.x.ai) does not disclose where inference runs; the US regional endpoint (us.api.x.ai) runs inference, moderation and storage in the US.
Region pinning
Yes, self-serve
A US regional endpoint (us.api.x.ai) keeps request handling, inference, moderation and stored prompts and outputs in the US, at 10% higher token prices, for grok-4.7 and grok-4.6 only; Files, Collections and server-side tools fall outside it. The global endpoint has no region commitment.
Prompt retention
Retained · 30 days
By default API requests and responses are stored encrypted at rest for 30 days for abuse auditing, then automatically deleted.
Trains on API data
No
xAI states it never trains on API inputs or outputs without explicit permission.
Zero data retention
Available
ZDR can be enabled at team level via the xAI Console so prompts are never persisted to disk, but it disables stateful features (Stateful Responses, Files, Collections, Batch APIs).
Compiled from xAI’s published privacy policy, terms, and documentation on 2026-10-14. “Not disclosed” means xAI publishes nothing on the point. Policies change without notice, so verify against the sources above before relying on this for compliance decisions.