A web-based platform that provides version control and collaboration tools for software development, allowing developers to store, manage, and track changes to code repositories. The service hosts millions of open source and private software projects, making it a critical infrastructure for the global software development community. Its terms of service and privacy policies directly impact how developers can use the platform, share code, and control access to their intellectual property.

5 Documents
68 All provisions 9 High severity 42 Medium severity 17 Low severity
4 Changes · 12 mo 1 high
May 13, 2026 Last change

High — provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure. Medium — provisions worth knowing about but with partial protections or limited scope. Low — standard terms with minimal consumer impact.

Governance Coverage
Privacy Rights
20 provisions · 3 high · 12 med
Data Sharing
10 provisions · 3 high · 6 med
Data Collection
6 provisions · 6 med
Disclosure Requirements
6 provisions
Acceptable Use
4 provisions · 3 med
Platform Discretion
4 provisions · 3 med
Enforcement Actions
3 provisions · 3 med
Age Restriction
3 provisions · 3 med
Content Moderation
3 provisions · 3 med
Data Retention
3 provisions · 3 med
Quick Facts
AI Training: Disclosed (high impact)
Data Retention: Specified
Key Governance Provisions
High International Data Transfers and Standard Contractual Clauses

The policy states GitHub relies on Standard Contractual Clauses for international transfers, which is the standard legal mechanism post-Schrems II; however, adequacy of these transfers depends on sup…

High AI Product Improvement and Copilot Data Use

The policy authorizes use of user data for AI product development, which may include training or improving machine learning models; the full scope of this use is not entirely defined within this docu…

High Affiliate Data Sharing with Microsoft

The policy authorizes transfer of personal data to Microsoft's broader corporate family, meaning data collected by GitHub may be processed under Microsoft's separate privacy terms and for Microsoft's…

High Enterprise Controller-Processor Distinction

This provision clarifies the data governance structure within organizational deployments, allocating responsibility and control authority between GitHub and the organization, which affects compliance…

High Broad Content License Grant

The clause establishes the operational scope of GitHub's content handling authority when repositories are set to public visibility, defining what technical and display functions GitHub may perform wi…

Document Coverage
Acceptableusepolicy Developerterms Privacypolicy Termsofservice
Last change detected: May 13, 2026 Changes (12 months): 4 (1 high) Documents monitored: 5 Provisions tracked: 68
Compare With Similar Platforms
Atlassian Datadog Fly.io Notion Postman Segment Supabase Twilio

Documents

GitHub Acceptable Use Policies

Medium

GitHub's Acceptable Use Policies define the conduct rules all GitHub users must follow when using any GitHub product or service, covering prohibited content types, restricted activities, and platform behavior standards. …

Last updated May 12, 2026 · Acceptable use policy
8 provisions 1 version captured Version history →

GitHub Copilot Product Terms

Last updated May 11, 2026 · Developer terms
0 provisions 0 versions captured Version history →

GitHub Copilot Business Privacy Statement

Low

This is the GitHub Copilot Trust Center, a public-facing compliance disclosure portal that lists GitHub Copilot's security certifications and makes selected audit reports available on request. The most operationally significant …

Last updated May 11, 2026 · Privacy policy
6 provisions 2 versions captured Version history →

GitHub Privacy Statement

Medium

This document establishes GitHub's data collection, processing, and sharing practices for users of its platform. GitHub collects personal identifiers (name, email address), payment information, device identifiers, IP addresses, browsing activity, …

Last updated May 5, 2026 · Privacy policy
10 provisions 3 versions captured 1 significant change Version history →

GitHub Terms of Service

Medium

This document establishes the terms governing user accounts and content hosted on GitHub.com, including rights to publicly posted content and service obligations. The agreement authorizes GitHub to exercise a license …

Last updated May 5, 2026 · Terms of service
10 provisions 3 versions captured 2 significant changes Version history →

Recent Changes

April 28, 2026 · GitHub Privacy Statement High

GitHub updated its Privacy Statement on April 28, 2026 to explicitly authorize collection and use of AI outputs from user-provided content, and to broaden the scope of personal data sharing …

View change record →
April 28, 2026 · GitHub Terms of Service Medium

GitHub added a new section titled 'AI Features, Training, and Your Data' to its Terms of Service on April 28, 2026, establishing specific terms governing GitHub Copilot and other AI …

View change record →
April 19, 2026 · GitHub Terms of Service Medium

GitHub substantially revised its Terms of Service on April 19, 2026, with 54 sentences modified, 40 removed, and 4 added across the 332-sentence document. The scale of revision suggests comprehensive …

View change record →
📈 Policy Drift Analysis View all changes →

Medium Severity Provisions (11)

View all high severity provisions → Compare GitHub with other platforms →

Applicable Regulations

EU AI Act
European Union
View official text ↗
CCPA/CPRA
California, USA
View official text ↗
Colorado AI Act
US-CO
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMCA
United States Federal
View official text ↗
DSA
European Union
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Texas AI Act
Texas, USA
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗

Compare with Similar Platforms

Atlassian
developer_tools
Datadog
developer_tools
Fly.io
developer_tools
Notion
developer_tools
Postman
developer_tools
Segment
developer_tools
Supabase
developer_tools
Twilio
developer_tools

Frequently Asked Questions

What GitHub documents does ConductAtlas track?

ConductAtlas tracks 5 GitHub documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.

How many policy changes has GitHub made in the past year?

GitHub has made 4 policy changes in the past 12 months across the documents ConductAtlas tracks, including 1 classified as high severity.

How many provisions has ConductAtlas classified for GitHub?

ConductAtlas has classified 68 provisions across GitHub's tracked documents. 9 are rated high severity, 42 medium, and 17 low.

Can I get alerts when GitHub changes their policies?

Yes. Monitor subscribers ($19/month) can add GitHub to their watchlist and receive same-day email alerts whenever any tracked document changes.