xAI Grok Security Concerns

[John Morton]

Just a quick note concerning Grok now this is the 3CX recommended transcription service.

I guess that 3CX have done some security due diligence regarding Grok and what it does with the call data.

I just want to have a response if pushed on how secure the data being transcribed is when sent to xAI (I guess this will be in the US somewhere), some of our clients call recordings will include sensitive information.

Do you have a standard statement concerning Grok and security or what happens to the call recording data once transcribed?

Any help would be greatly appreciated.

 

[N_G]

You configure GROK in 3CX. All data goes directly to Grok. We don't get involved into what GROK does or doesnt do with your data.

If you want to have full control of the data use the onboard transcription service which allows you to keep full control of your data. The transcription never leaves your network.

Also: You can use Google or OpenAI for transcription as well, no problem at all. Matter of preference and price.

 

[John Morton]

Ok, thanks for the response. Just for clarity although the recommendation from 3CX is to use Grok for transcription rather than what was a great 3CX Cloud transcription service, you do this at your own risk, and the same would apply to OpenAI and Google.

The only way to achieve a transcription service for call recordings with any semblance of security or idea of what's happening to your data, is to invest and build your own transcription server with relevant GPU and run the 3CX transcription service locally. Seems like a backward step from something that was working fine, maybe 3CX could have charged an additional fee for the service. Just my opinion.

 

[Kevin Attard Compagno]

Your line of thinking seems flawed to me, because:

If you have concerns over "where does my data go" when using Grok or OpenAI, then logic requires that you would have EXACTLY the same concerns when using the 3CX Cloud Transcription service - because the security attack surface looks EXACTLY the same.

As with ANY software solution, the only way to have 100% control of where your data lives is to host it yourself.