Security Concern - OpenAI API Key

Julius Mensing

• 12. Mai 2023 08:56

Good Morning,

I had a first high-level test drive through the App and came across the OpenAI settings:

I guess that this will be required for the SAINDY part of the app.

But I would have security concerns when having to share my OpenAI API key when reading that it is rather a personal token:

Can you please elaborate a bit further on the settings and why the key is required i.e. how a security issue can be ruled out here.

Thank you and keep up the good work 👍

0

• 

  Rene (i-Human)

  • 12. Mai 2023 09:03

  Good morning,

  Thank you for expressing your concerns regarding the OpenAI API key and its security implications. We understand the importance of data privacy and security. Let me explain the purpose of the key and address your security concerns.

  The OpenAI API key is required for the proper functioning of the SAINDY part of the app. It allows the integration of OpenAI services, such as language processing and generation capabilities, into the application. By providing the key, the app gains access to the OpenAI service for generating responses and performing other language-related tasks.

  Regarding security, it's important to note that the OpenAI API key is used solely for the purpose of interacting with the OpenAI service. It does not provide access to any tenant-specific data or sensitive information related to your account or business central. The key is used within the app's environment to communicate securely with the OpenAI service and obtain the desired language outputs.

  As a publisher, we assure you that we do not access or store any tenant-specific data outside of the app's environment. Our commitment is to respect your privacy and ensure that your data remains secure. The OpenAI API key is required for the smooth functioning of the app and is not used for any other purposes or to access any personal data.

  If you have any further concerns or questions regarding the security of the app or the usage of the OpenAI API key, please feel free to let us know. We appreciate your feedback and are committed to addressing any security-related issues promptly.

  Thank you for your support and trust in our work. We value your satisfaction and will continue to improve our services.

  Best regards,
  Rene

  0
• 

  Julius Mensing

  • 12. Mai 2023 12:14

  Thank you for clarifying René.

  Would it not be possible to have an API Key that is provided by you already i.e. the whole OpenAPI settings would not even be required?

  Or is there anything truly user specific?

  0
• 

  Rene (i-Human)

  • 12. Mai 2023 12:52

  Hu Julius,

  Unfortunately, I must clarify that OpenAI's services, including the OpenAI API, are charged services. OpenAI provides access to their language models and APIs through a paid subscription model, and the usage of their services typically incurs costs.This is and should not be our business. 

  Our app is free of charge and if you want to offer an optional service that utilizes the OpenAI API, it is indeed up to the individual user to decide whether they want to use that service or not. But to try it out we provide an demo key during the installation of the app. This key is limited in use. 

  Anyway, OPEN AI (actually) offers a free trial of the API interface, so anyone interested can just try it without any additional cost. :) :)

  It's up to you to subscribe.

  The setting is therefore not user-specific, but organization-specific. :) 

  Rene

   

   

   

  0
• 

  Julius Mensing

  • 12. Mai 2023 13:21

  Great, convinced :)

  I will give it a try and see how it works.

  Have a great weekend...

  0

Bitte melden Sie sich an, um einen Kommentar zu hinterlassen.