This analysis describes what GitHub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The commitment creates an affirmative obligation on GitHub to safeguard private repository contents, establishing a baseline confidentiality standard.
Interpretive note: The excerpt likely contains additional conditions or exceptions (e.g., legal process carve-outs) that are not visible in the truncated text. The canonical claim reflects only the affirmative obligation stated.
GitHub's updated Terms of Service now include an explicit section governing AI features, including Copilot. The new section establishes specific contractual terms for how user data may be collected, used, and retained for developing and improving AI and machine learning models, and identifies what controls are available to users. The practical effect is that AI-related data practices are now consolidated under dedicated contractual language rather than dispersed across general service terms.
View change record →GitHub's Terms of Service update on April 19, 2026 involved substantial revisions across 54 sentences, with 40 sentences removed and 4 added. The extent of change suggests modifications to core service provisions; however, without access to the specific language that was modified, removed, or added, the precise operational implications for users cannot be determined. Users should review the updated Terms directly to understand how the changes affect their usage rights, account obligations, or dispute resolution procedures.
View change record →Users can expect GitHub to actively protect their private repository contents against unauthorized use, access, or disclosure.
How other platforms handle this
If the disclosing party sends a written request, the receiving party will promptly return or destroy all Confidential Information received from the disclosing party, together with copies, except that a party may retain archival copies in accordance with its document retention policy or as required b...
to the extent practicable, upon request of the Disclosing Party return or destroy all Confidential Information of the Disclosing Party that is in its possession upon termination or expiration of this Agreement.
In the event of Account deletion for any reason, the Company may, but is not obligated to, delete any of Your Content. the Company shall not be responsible for the failure to delete or deletion of Your Content.
"GitHub considers the contents of private repositories to be confidential to you. GitHub will protect the contents of private repositories from unauthorized use, access, or disclosure...Excerpt from GitHub's Terms of Service
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The commitment creates an affirmative obligation on GitHub to safeguard private repository contents, establishing a baseline confidentiality standard.
Users can expect GitHub to actively protect their private repository contents against unauthorized use, access, or disclosure.
ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by GitHub.