Usage Panda sits between your client and OpenAI as a proxy, intercepting each request and evaluating it against a policy you define. Usage Panda does not save, or log, your OpenAI API key (although it does pass through the proxy). Request and response details are only logged if you opt in. We are also working on a fully self-hosted proxy that will allow you to use all of the same features of Usage Panda, but pass the requests through a proxy you run in your own infrastructure.
Usage Panda records the email address used to sign up for an account, IP address information, and other OpenAI API request details (model, token count, temperature, and other parameters). Usage Panda does not log the contents of your prompts, or the OpenAI response, unless you opt-in.
We do not share any of the information described above with any third-parties. We only use this data to provide the described services to you.
Usage Panda is hosted in Amazon Web Services (AWS) and follows security best practices including: encryption in transit and at rest, least-privileged access to our environment, up-to-date software dependencies, logging, auditing, and monitoring.