The document states, in response to the FAQ question, that GitHub does not use Copilot Business or Enterprise customer data to train AI models.
This analysis describes what GitHub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision is the most operationally significant data use commitment on the Trust Center page for enterprise customers, as it defines the boundary of how prompt and engagement data submitted through Business and Enterprise tiers may be used by GitHub.
Interpretive note: The commitment appears in a FAQ section of a Trust Center informational page rather than in a binding contractual document; the legal weight of this statement depends on whether it is reflected in GitHub's Terms of Service or Data Processing Agreement.
Directly addresses a critical privacy concern by explicitly documenting GitHub's policy against using customer data for model training, which is material to customer trust and data protection.
View full change record →Under this disclosure, enterprise and business subscribers' prompts, suggestions, feedback, and engagement data are stated to be excluded from use in training GitHub's AI models, distinguishing these tiers from individual consumer-tier data handling.
Cross-platform context
See how other platforms handle No AI Model Training on Business and Enterprise Data and similar clauses.
Compare across platforms →"Does GitHub use Copilot Business or Enterprise data to train AI models?Excerpt from GitHub's Copilot Business Privacy Statement
(1) REGULATORY LANDSCAPE: This commitment engages GDPR requirements regarding purpose limitation and data use transparency enforced by EU supervisory authorities, as well as CCPA provisions regarding the use of personal information.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision is the most operationally significant data use commitment on the Trust Center page for enterprise customers, as it defines the boundary of how prompt and engagement data submitted through Business and Enterprise tiers may be used by GitHub.
Under this disclosure, enterprise and business subscribers' prompts, suggestions, feedback, and engagement data are stated to be excluded from use in training GitHub's AI models, distinguishing these tiers from individual consumer-tier data handling.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by GitHub.