“You may not use GitHub in violation of export control or sanctions laws of the United States or any other applicable jurisdiction.”
This analysis describes what GitHub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The prohibition directly binds users to compliance with a broad, multi-jurisdictional set of legal regimes as a condition of using GitHub.
GitHub's updated Terms of Service now include an explicit section governing AI features, including Copilot. The new section establishes specific contractual terms for how user data may be collected, used, and retained for developing and improving AI and machine learning models, and identifies what controls are available to users. The practical effect is that AI-related data practices are now consolidated under dedicated contractual language rather than dispersed across general service terms.
View change record →Users are prohibited from using GitHub in any manner that would violate export control or sanctions laws in the U.S. or any other applicable jurisdiction.
How other platforms handle this
We use Personal Data to meet our contractual and legal obligations related to anti-money laundering, Know-Your-Customer ("KYC") laws, anti-terrorism activities...export control, and prohibition of doing business with restricted persons...
you are not a person who is barred from using the Services under the laws of the United States, the United Kingdom, or any other applicable jurisdiction — including, for example, that you do not appear on the U.S. Treasury Department's list...
You are not permitted to acquire Digital Assets or use any of the Coinbase Services through the Site if doing so would violate applicable laws and regulations, including but not limited to those of the United Nations Security Council, the United States...
"You may not use GitHub in violation of export control or sanctions laws of the United States or any other applicable jurisdiction.Excerpt from GitHub's Terms of Service
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The prohibition directly binds users to compliance with a broad, multi-jurisdictional set of legal regimes as a condition of using GitHub.
Users are prohibited from using GitHub in any manner that would violate export control or sanctions laws in the U.S. or any other applicable jurisdiction.
ConductAtlas has identified this type of provision across 181 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by GitHub.