Yes, it would typically be done under contract and then implemented as compliance policy across the enterprise cloud - it would not be up to a tenant to arrange a ZDR policy.

Also, the models are shipped to big platforms to run as an executable on their hardware. Except in certain cases like Anthropic Fable.

In true enterprise you’d want a compliance office product before an engineering office product…