When uploading operational data to a third-party AI platform, one should confirm whether the data is used for model training, the method of storage encryption, deletion rights, and compliance certifications such as SOC 2.