{"generated":"2026-10-22","schema_version":1,"sources":{"oai-ent":{"id":"oai-ent","url":"https://openai.com/enterprise-privacy/","title":"OpenAI – Enterprise privacy at OpenAI (updated Jan 8, 2026)"},"oai-dc":{"id":"oai-dc","url":"https://help.openai.com/en/articles/7730893-data-controls-faq","title":"OpenAI Help – Data controls in ChatGPT"},"oai-sso-biz":{"id":"oai-sso-biz","url":"https://help.openai.com/en/articles/11489188-setting-up-single-sign-on-sso-for-chatgpt-business","title":"OpenAI Help – SSO for ChatGPT Business"},"oai-scim":{"id":"oai-scim","url":"https://help.openai.com/en/articles/10011769-scim-provisioning-and-management","title":"OpenAI Help – SCIM provisioning and management"},"oai-net":{"id":"oai-net","url":"https://help.openai.com/en/articles/20001323-corporate-network-controls-in-chatgpt-enterprise","title":"OpenAI Help – Corporate network controls in ChatGPT Enterprise"},"oai-ip":{"id":"oai-ip","url":"https://help.openai.com/en/articles/12111596-ip-allowlisting-for-chatgpt","title":"OpenAI Help – IP allowlisting for ChatGPT"},"ant-consumer":{"id":"ant-consumer","url":"https://www.anthropic.com/news/updates-to-our-consumer-terms","title":"Anthropic – Updates to Consumer Terms and Privacy Policy (Aug 28, 2025)"},"ant-ret":{"id":"ant-ret","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","title":"Anthropic Privacy Center – How long do you store my data? (consumer)"},"ant-train":{"id":"ant-train","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","title":"Anthropic Privacy Center – Is my data used for model training? (commercial)"},"ant-sso":{"id":"ant-sso","url":"https://support.claude.com/en/articles/13132885-set-up-single-sign-on-sso","title":"Claude Help – Set up single sign-on (SSO)"},"ant-scim":{"id":"ant-scim","url":"https://support.claude.com/en/articles/13133195-set-up-jit-or-scim-provisioning","title":"Claude Help – Set up JIT or SCIM provisioning"},"ant-audit":{"id":"ant-audit","url":"https://support.claude.com/en/articles/9970975-access-audit-logs","title":"Claude Help – Access audit logs"},"ant-ent":{"id":"ant-ent","url":"https://support.claude.com/en/articles/9797531-what-is-the-enterprise-plan","title":"Claude Help – What is the Enterprise plan?"},"ant-tr":{"id":"ant-tr","url":"https://support.claude.com/en/articles/13198485-enforce-network-level-access-control-with-tenant-restrictions","title":"Claude Help – Tenant Restrictions"},"g-apps":{"id":"g-apps","url":"https://support.google.com/gemini/answer/13594961?hl=en","title":"Google – Gemini Apps Privacy Hub"},"g-ws":{"id":"g-ws","url":"https://support.google.com/a/answer/15706919?hl=en","title":"Google Workspace – Generative AI in Google Workspace Privacy Hub"},"g-onoff":{"id":"g-onoff","url":"https://support.google.com/a/answer/14571493?hl=en","title":"Google Workspace Admin – Turn the Gemini App on or off"},"ms-priv":{"id":"ms-priv","url":"https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-privacy","title":"Microsoft Learn – Data, privacy, and security for Microsoft Copilot"},"ms-audit":{"id":"ms-audit","url":"https://learn.microsoft.com/en-us/purview/audit-copilot","title":"Microsoft Learn – Audit logs for Copilot and AI applications"},"ms-trv2":{"id":"ms-trv2","url":"https://learn.microsoft.com/en-us/entra/external-id/tenant-restrictions-v2","title":"Microsoft Learn – Configure Tenant Restrictions v2"},"gh-plans":{"id":"gh-plans","url":"https://github.com/features/copilot/plans","title":"GitHub – Copilot plans & pricing"},"gh-biz":{"id":"gh-biz","url":"https://github.com/features/copilot/copilot-business","title":"GitHub – Copilot Business (FAQ)"},"gh-net":{"id":"gh-net","url":"https://docs.github.com/en/copilot/how-tos/administer-copilot/manage-for-organization/manage-access/manage-network-access","title":"GitHub Docs – Managing Copilot access to your organization's network"},"gr-train":{"id":"gr-train","url":"https://support.grammarly.com/hc/en-us/articles/25555503115277-Product-Improvement-and-Training-Control","title":"Grammarly Support – Product Improvement and Training Control"},"gr-sso":{"id":"gr-sso","url":"https://support.grammarly.com/hc/en-us/articles/360048683092-Set-up-SAML-single-sign-on","title":"Grammarly Support – Set up SAML single sign-on"},"gr-scim":{"id":"gr-scim","url":"https://support.grammarly.com/hc/en-us/articles/4403054674829-Configure-SCIM-provisioning","title":"Grammarly Support – Configure SCIM provisioning"},"ot-ps":{"id":"ot-ps","url":"https://otter.ai/privacy-security","title":"Otter.ai – Privacy & Security"},"ot-ent":{"id":"ot-ent","url":"https://help.otter.ai/hc/en-us/articles/13352505516695-Enterprise-Admin-Controls-Overview","title":"Otter Help – Enterprise Admin Controls Overview"},"no-sec":{"id":"no-sec","url":"https://www.notion.com/help/notion-ai-security-practices","title":"Notion Help – Notion AI security practices"},"no-faq":{"id":"no-faq","url":"https://www.notion.com/help/notion-ai-faqs","title":"Notion Help – Notion AI FAQs"},"no-sso":{"id":"no-sso","url":"https://www.notion.com/help/saml-sso-configuration","title":"Notion Help – SAML SSO"},"no-scim":{"id":"no-scim","url":"https://www.notion.com/help/provision-users-and-groups-with-scim","title":"Notion Help – Provision users and groups with SCIM"},"no-audit":{"id":"no-audit","url":"https://www.notion.com/help/audit-log","title":"Notion Help – Audit log"},"zm-wp":{"id":"zm-wp","url":"https://library.zoom.com/ai/ai-whitepaper/zooms-commitment-to-responsible-ai","title":"Zoom Technical Library – Zoom's commitment to responsible AI"},"zm-kb":{"id":"zm-kb","url":"https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0079498","title":"Zoom Support – Getting started with Custom AI Companion features"},"cu-sec":{"id":"cu-sec","url":"https://cursor.com/security","title":"Cursor – Security (last updated Aug 25, 2026)"},"cu-data":{"id":"cu-data","url":"https://cursor.com/data-use","title":"Cursor – Data Use & Privacy Overview"},"cu-ent":{"id":"cu-ent","url":"https://cursor.com/docs/account/teams/enterprise-settings","title":"Cursor Docs – Enterprise overview / plan comparison"},"cu-sso":{"id":"cu-sso","url":"https://cursor.com/docs/account/teams/sso","title":"Cursor Docs – SSO"},"cu-iam":{"id":"cu-iam","url":"https://cursor.com/docs/enterprise/identity-and-access-management","title":"Cursor Docs – Identity and Access Management"},"cu-tr":{"id":"cu-tr","url":"https://cursor.com/docs/enterprise/tenancy-restriction","title":"Cursor Docs – Tenancy restriction"},"ds-pp":{"id":"ds-pp","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","title":"DeepSeek – Privacy Policy"},"mj-stealth":{"id":"mj-stealth","url":"https://docs.midjourney.com/hc/en-us/articles/32019750070669-Stealth-Mode","title":"Midjourney Docs – Stealth Mode"},"mj-train":{"id":"mj-train","url":"https://docs.midjourney.com/hc/en-us/articles/48067080311309-Public-Summary-of-Training-Content","title":"Midjourney Docs – Public Summary of Training Content (Mar 17, 2026)"},"ff-sec":{"id":"ff-sec","url":"https://fireflies.ai/security","title":"Fireflies.ai – Security"},"ff-price":{"id":"ff-price","url":"https://fireflies.ai/pricing","title":"Fireflies.ai – Pricing & Plans"},"sl-priv":{"id":"sl-priv","url":"https://slack.com/trust/data-management/privacy-principles","title":"Slack – Privacy principles: search, learning and AI"},"oai-res":{"id":"oai-res","url":"https://help.openai.com/en/articles/9903489-data-residency-and-inference-residency-for-chatgpt","title":"OpenAI Help – Data residency and inference residency for ChatGPT"},"oai-biz":{"id":"oai-biz","url":"https://openai.com/business-data/","title":"OpenAI – Business data privacy, security, and compliance"},"ant-pricing":{"id":"ant-pricing","url":"https://claude.com/pricing","title":"Anthropic – Claude pricing (plan comparison)"},"ant-orgret":{"id":"ant-orgret","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","title":"Anthropic Privacy Center – How long do you store my organization's data?"},"ant-ct":{"id":"ant-ct","url":"https://www.anthropic.com/legal/commercial-terms","title":"Anthropic – Commercial Terms of Service (incorporates DPA)"},"g-dr":{"id":"g-dr","url":"https://knowledge.workspace.google.com/admin/compliance/data-covered-by-data-regions","title":"Google Workspace Admin – Data covered by data regions"},"ms-req":{"id":"ms-req","url":"https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-requirements","title":"Microsoft Learn – Microsoft 365 Copilot requirements"},"gh-trust":{"id":"gh-trust","url":"https://copilot.github.trust.page/faq","title":"GitHub Copilot Trust Center – FAQ"},"gh-audit":{"id":"gh-audit","url":"https://docs.github.com/en/copilot/how-tos/administer-copilot/manage-for-organization/review-activity/review-audit-logs","title":"GitHub Docs – Review audit logs for Copilot (Copilot Business or Enterprise)"},"gh-dr":{"id":"gh-dr","url":"https://docs.github.com/en/enterprise-cloud@latest/admin/data-residency/github-copilot-with-data-residency","title":"GitHub Docs – GitHub Copilot with data residency"},"gh-terms":{"id":"gh-terms","url":"https://github.com/customer-terms","title":"GitHub – Customer agreements (Generative AI Services Terms, DPA)"},"px-ent":{"id":"px-ent","url":"https://www.perplexity.ai/help-center/en/articles/10352973-what-is-enterprise-pro","title":"Perplexity Help – What is Enterprise Pro?"},"px-scim":{"id":"px-scim","url":"https://www.perplexity.ai/help-center/en/articles/11652604-scim-based-user-account-management","title":"Perplexity Help – SCIM-based user account management"},"px-audit":{"id":"px-audit","url":"https://www.perplexity.ai/help-center/en/articles/11652747-audit-logs","title":"Perplexity Help – Audit Logs"},"px-ret":{"id":"px-ret","url":"https://www.perplexity.ai/help-center/en/articles/11652701-data-retention-for-enterprise","title":"Perplexity Help – Data Retention for Enterprise"},"px-acct":{"id":"px-acct","url":"https://www.perplexity.ai/help-center/en/articles/10352990-account-settings","title":"Perplexity Help – Account & Settings"},"gr-plans":{"id":"gr-plans","url":"https://www.grammarly.com/plans","title":"Grammarly – Plans (feature comparison)"},"gr-wp":{"id":"gr-wp","url":"https://www.grammarly.com/media-resources/security-whitepaper","title":"Grammarly – Security Whitepaper (PDF)"},"gr-cba":{"id":"gr-cba","url":"https://www.grammarly.com/terms/customer-business-agreement","title":"Superhuman (Grammarly) – Customer Business Agreement"},"ot-price":{"id":"ot-price","url":"https://otter.ai/pricing","title":"Otter.ai – Pricing"},"ot-tos":{"id":"ot-tos","url":"https://otter.ai/terms-of-service","title":"Otter.ai – Terms of Service (Appendix 1: DPA)"},"no-price":{"id":"no-price","url":"https://www.notion.com/pricing","title":"Notion – Pricing (plan comparison)"},"no-dr":{"id":"no-dr","url":"https://www.notion.com/help/data-residency","title":"Notion Help – Data residency"},"no-gdpr":{"id":"no-gdpr","url":"https://www.notion.com/help/gdpr-at-notion","title":"Notion Help – GDPR at Notion (DPA incorporated by reference)"},"zm-gov":{"id":"zm-gov","url":"https://library.zoom.com/ai/ai-whitepaper/data-governance-and-privacy","title":"Zoom AI Whitepaper – Data governance and privacy"},"zm-sso":{"id":"zm-sso","url":"https://library.zoom.com/admin-corner/account-and-endpoint-management/sso-field-guide","title":"Zoom Technical Library – SSO Field Guide"},"zm-scim":{"id":"zm-scim","url":"https://developers.zoom.us/docs/api/scim2/","title":"Zoom Developer Docs – SCIM 2 API (prerequisites)"},"zm-eu":{"id":"zm-eu","url":"https://media.zoom.com/download/assets/zoom-eu-infrastructure-fact-sheet.pdf/3d23251255a811f0bc811651fbd1a193","title":"Zoom – EU Infrastructure fact sheet (PDF)"},"zm-dpa":{"id":"zm-dpa","url":"https://media.zoom.com/download/assets/zoom-global-dpa.pdf/dd327ebea27e11efb613d6ba63ed4cee","title":"Zoom – Global Data Processing Addendum (PDF)"},"cu-price":{"id":"cu-price","url":"https://cursor.com/pricing","title":"Cursor – Pricing (plan comparison)"},"cu-gov":{"id":"cu-gov","url":"https://cursor.com/docs/enterprise/privacy-and-data-governance","title":"Cursor Docs – Privacy and data governance"},"cu-dpa":{"id":"cu-dpa","url":"https://cursor.com/terms/dpa","title":"Cursor – Data Processing Addendum"},"ff-pp":{"id":"ff-pp","url":"https://fireflies.ai/privacy-policy","title":"Fireflies.ai – Privacy Policy"},"ff-dpa":{"id":"ff-dpa","url":"https://fireflies.ai/dpa","title":"Fireflies.ai – Data Processing Agreement"},"sl-price":{"id":"sl-price","url":"https://slack.com/pricing","title":"Slack – Pricing (plan comparison)"},"sl-ret":{"id":"sl-ret","url":"https://slack.com/help/articles/203457187-Customize-message-and-file-retention-policies","title":"Slack Help – Customize message and file retention policies"},"sl-faq":{"id":"sl-faq","url":"https://slack.com/trust/privacy/privacy-faq","title":"Slack – Privacy FAQs"}},"tools":[{"id":"chatgpt","name":"ChatGPT","vendor":"OpenAI","category":"Chat assistant","seo_question":"Does ChatGPT train on your data?","summary":"Personal plans can be used for training unless the user turns off “Improve the model for everyone”. Business and Enterprise workspaces are not used for training by default. Enterprise adds SCIM, the Compliance API and a header that blocks personal accounts on your network.","plans":[{"name":"Free / Go / Plus / Pro (personal)","audience":"consumer","training":{"value":"opt-out","note":"Used to train unless the user turns off “Improve the model for everyone” in Settings → Data controls. Temporary chats are not used for training. Feedback (thumbs up/down) can send the whole conversation for training even after opting out.","source":"oai-dc","checked":"2026-10-22"},"retention":{"value":"Temporary chats: up to 30 days","note":"How long regular chat history is kept is not stated on the page we checked.","source":"oai-dc","checked":"2026-10-22"},"sso":{"value":"no","note":"OpenAI lists SAML SSO only as a ChatGPT Business / Enterprise workspace feature; personal plans have no SSO.","source":"oai-biz","checked":"2026-10-22"},"scim":{"value":"no","note":"SCIM is listed only for ChatGPT Enterprise / Edu / Healthcare.","source":"oai-biz","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"No audit logging is listed for personal plans; audit/compliance tooling is an Enterprise feature.","source":"oai-biz","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":"Self-service data export and account deletion are available on Free, Go, Plus and Pro."},{"name":"Business (formerly Team)","audience":"business","training":{"value":"no","note":"Not used for training by default. Training only happens if you explicitly opt in, for example through feedback.","source":"oai-ent","checked":"2026-10-22"},"retention":{"value":"Admin-controlled","note":"Workspace admins control retention. Deleted or unsaved conversations are removed within 30 days unless the law requires longer.","source":"oai-ent","checked":"2026-10-22"},"sso":{"value":"yes","note":"Self-serve SAML or OIDC SSO with domain verification is included.","source":"oai-sso-biz","checked":"2026-10-22"},"scim":{"value":"no","note":"Standalone Business has no SCIM, so users are added and removed by hand. It can only get tenant-wide SCIM through an eligible Enterprise workspace in the same tenant.","source":"oai-scim","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"Business features list only “basic analytics”. The Compliance/Audit Logs APIs are listed for Enterprise and the API platform.","source":"oai-biz","checked":"2026-10-22"},"data_residency":{"value":"no","note":"Data residency is offered to eligible API and new ChatGPT Enterprise/Edu customers; Business is not listed as eligible.","source":"oai-res","checked":"2026-10-22"},"dpa":{"value":"yes","note":"OpenAI will sign a DPA for ChatGPT Business, Enterprise and the API.","source":"oai-ent","checked":"2026-10-22"},"notes":""},{"name":"Enterprise / Edu","audience":"enterprise","training":{"value":"no","note":"Not used for training by default.","source":"oai-ent","checked":"2026-10-22"},"retention":{"value":"Admin-controlled","note":"Workspace admins control retention. Deleted conversations are removed within 30 days unless legally required.","source":"oai-ent","checked":"2026-10-22"},"sso":{"value":"yes","note":"SAML SSO","source":"oai-ent","checked":"2026-10-22"},"scim":{"value":"yes","note":"SCIM is available for eligible Enterprise and Edu workspaces.","source":"oai-scim","checked":"2026-10-22"},"audit_logs":{"value":"yes","note":"Admins can get an audit log of conversations and GPTs through the Enterprise Compliance API.","source":"oai-ent","checked":"2026-10-22"},"data_residency":{"value":"yes – 10 regions at rest; in-region inference in EU/US/UAE","note":"Storage at rest: Australia, Canada, Europe (EEA+CH), India, Japan, Singapore, South Korea, UAE, UK, US. Inference residency: Europe, US, UAE. New Enterprise/Edu workspaces only; included at no extra cost. Workspace metadata, logins and billing can sit outside the region.","source":"oai-res","checked":"2026-10-22"},"dpa":{"value":"yes","note":"","source":"oai-ent","checked":"2026-10-22"},"notes":"IP allowlisting is available on Enterprise and Edu."}],"enforcement":[{"kind":"network","method":"Allow only your workspace (header injection)","detail":"Have your TLS-inspecting proxy or SASE add `ChatGPT-Allowed-Workspace-Id: <workspace-uuid>` to requests for https://chatgpt.com/*. Personal workspaces and any workspace not listed are filtered out, and users with no allowed workspace get a 403. Separate multiple UUIDs with commas and no spaces. Requires ChatGPT Enterprise.","source":"oai-net","checked":"2026-10-22"},{"kind":"network","method":"Block logged-out use","detail":"Block URLs that start with https://chatgpt.com/backend-anon/ to stop anonymous ChatGPT use.","source":"oai-net","checked":"2026-10-22"},{"kind":"admin-console","method":"IP allowlisting","detail":"Workspace Settings → Identity & access → Access Restrictions. Only allowlisted IPs can load workspace data. Available on Enterprise and Edu.","source":"oai-ip","checked":"2026-10-22"}],"domains":[{"domain":"chatgpt.com","doc_stated":true,"source":"oai-net"}]},{"id":"claude","name":"Claude","vendor":"Anthropic","category":"Chat assistant","seo_question":"Does Claude train on your data?","summary":"Since the consumer-terms change (Aug 28, 2025), every Free, Pro and Max user has to choose whether their chats are used for training. Choosing yes extends retention to 5 years. Team and Enterprise (commercial terms) are not used for training by default. SCIM, audit logs and Tenant Restrictions are Enterprise-only.","plans":[{"name":"Free / Pro / Max (personal)","audience":"consumer","training":{"value":"user-choice","note":"Users choose at signup or in Privacy Settings whether new or resumed chats, including Claude Code sessions, can be used for training. Incognito chats are never used.","source":"ant-consumer","checked":"2026-10-22"},"retention":{"value":"30 days after deletion, or up to 5 years if training is allowed","note":"Deleted chats are removed from back-end storage within 30 days. If training is on, data may be kept de-identified for up to 5 years. Chats flagged for policy violations: inputs/outputs up to 2 years, classifier scores up to 7 years.","source":"ant-ret","checked":"2026-10-22"},"sso":{"value":"no","note":"Plan comparison shows “No” for SSO on Free, Pro, Max 5x and Max 20x.","source":"ant-pricing","checked":"2026-10-22"},"scim":{"value":"no","note":"Plan comparison shows “No” for SCIM on all personal plans.","source":"ant-pricing","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"Plan comparison shows “No” for audit logs on all personal plans.","source":"ant-pricing","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"no","note":"Consumer plans fall under the Consumer Terms; the DPA is incorporated in the Commercial Terms, which explicitly exclude Free/Pro/Max.","source":"ant-consumer","checked":"2026-10-22"},"notes":""},{"name":"Team","audience":"business","training":{"value":"no","note":"Commercial products are not used for training by default. Exception: chats users explicitly send as feedback, which are kept up to 5 years. Owners can turn off the “Rate chats” feedback setting.","source":"ant-train","checked":"2026-10-22"},"retention":{"value":"Until deleted; purged from back end within 30 days","note":"Chats are kept so you can continue them; deleted chats are removed from history immediately and from back-end storage within 30 days. Incognito chats are deleted within 30 days. Flagged chats: inputs/outputs up to 2 years. Feedback: 5 years.","source":"ant-orgret","checked":"2026-10-22"},"sso":{"value":"yes","note":"SSO is available on Team, Enterprise and Console organizations.","source":"ant-sso","checked":"2026-10-22"},"scim":{"value":"no","note":"SCIM is not available on Team plans. JIT provisioning is.","source":"ant-scim","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"Audit logs are available for Enterprise organizations only.","source":"ant-audit","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"yes","note":"Claude for Work is under the Commercial Terms, which incorporate the Anthropic DPA by reference.","source":"ant-ct","checked":"2026-10-22"},"notes":""},{"name":"Enterprise","audience":"enterprise","training":{"value":"no","note":"Not used for training by default.","source":"ant-train","checked":"2026-10-22"},"retention":{"value":"Custom retention controls","note":"Enterprise includes custom data retention controls.","source":"ant-ent","checked":"2026-10-22"},"sso":{"value":"yes","note":"","source":"ant-sso","checked":"2026-10-22"},"scim":{"value":"yes","note":"SCIM is available for Enterprise and Console organizations.","source":"ant-scim","checked":"2026-10-22"},"audit_logs":{"value":"yes","note":"CSV export covering the last 180 days, plus the Compliance API.","source":"ant-audit","checked":"2026-10-22"},"data_residency":{"value":"US-only inference option","note":"Enterprise can keep inference inside the United States.","source":"ant-ent","checked":"2026-10-22"},"dpa":{"value":"yes","note":"Claude for Work is under the Commercial Terms, which incorporate the Anthropic DPA by reference.","source":"ant-ct","checked":"2026-10-22"},"notes":"Includes customer-managed encryption keys and HIPAA-ready configuration (BAA) for eligible organizations."}],"enforcement":[{"kind":"network","method":"Allow only your org (Tenant Restrictions)","detail":"Have a TLS-inspecting proxy overwrite (not append) `anthropic-allowed-org-ids: <org-uuid>[,<org-uuid>]` on claude.ai, api.anthropic.com, claude.com and anthropic.com. Personal accounts get a 403 `tenant_restriction_violation`. Covers web, desktop, API keys and OAuth tokens. Requires Enterprise or a Console organization.","source":"ant-tr","checked":"2026-10-22"},{"kind":"admin-console","method":"Disable feedback submission","detail":"Organization settings → Data and Privacy → “Rate chats”. This stops users sending feedback, which can be used for training.","source":"ant-train","checked":"2026-10-22"}],"domains":[{"domain":"claude.ai","doc_stated":true,"source":"ant-tr"},{"domain":"claude.com","doc_stated":true,"source":"ant-tr"},{"domain":"anthropic.com","doc_stated":true,"source":"ant-tr"},{"domain":"api.anthropic.com","doc_stated":true,"source":"ant-tr"}]},{"id":"gemini","name":"Gemini","vendor":"Google","category":"Chat assistant","seo_question":"Does Google Gemini train on your data?","summary":"On personal Google accounts, Gemini Apps chats can be used to improve Google AI and may be read by human reviewers while Keep Activity is on. With a work or school Google Workspace account, prompts and content are not human-reviewed and are not used to train models outside your domain without permission.","plans":[{"name":"Gemini Apps (personal Google account)","audience":"consumer","training":{"value":"opt-out","note":"With Keep Activity on, chats are used to improve Google services, including generative models, and a subset is read by human reviewers. Turn off Keep Activity or use temporary chats to stop future chats from being used. Chats are still processed to create anonymized data.","source":"g-apps","checked":"2026-10-22"},"retention":{"value":"18 months by default","note":"Auto-delete can be changed to 3 or 36 months, or indefinite. Chats that human reviewers looked at are not deleted when you delete your activity.","source":"g-apps","checked":"2026-10-22"},"sso":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"scim":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"audit_logs":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":""},{"name":"Gemini in Google Workspace (work/school account)","audience":"business","training":{"value":"no","note":"Not human-reviewed and not used to train generative AI models outside your domain without permission. This is backed by the Training Restriction in the Workspace Service Specific Terms.","source":"g-ws","checked":"2026-10-22"},"retention":{"value":"Gemini app: up to 36 months, admin-set","note":"Admins decide whether Gemini app conversations are saved. Workspace content follows Vault retention.","source":"g-ws","checked":"2026-10-22"},"sso":{"value":"unknown","note":"Uses your Google Workspace identity. Separate Gemini SSO tiering was not checked.","source":null,"checked":null},"scim":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"audit_logs":{"value":"yes","note":"Workspace audit logs cover Gemini in the Gemini app and in Workspace apps (Reporting API, security investigation tool).","source":"g-ws","checked":"2026-10-22"},"data_residency":{"value":"yes – US/EU data regions (edition-dependent)","note":"Gemini app prompts and responses are covered by Workspace data regions at rest (Fundamental, Education and Enterprise Data Regions; Assured Controls). Requires an edition that includes data regions.","source":"g-dr","checked":"2026-10-22"},"dpa":{"value":"yes","note":"Prompts are treated as customer data under the Cloud Data Processing Addendum.","source":"g-ws","checked":"2026-10-22"},"notes":""}],"enforcement":[{"kind":"admin-console","method":"Turn the Gemini app on or off per OU","detail":"Google Admin console → Generative AI → Gemini App lets you turn the Gemini app on or off, including per organizational unit.","source":"g-onoff","checked":"2026-10-22"}],"domains":[{"domain":"gemini.google.com","doc_stated":false,"source":null}]},{"id":"microsoft-365-copilot","name":"Microsoft 365 Copilot","vendor":"Microsoft","category":"Productivity suite AI","seo_question":"Does Microsoft 365 Copilot train on your data?","summary":"Prompts, responses and Microsoft Graph data are not used to train foundation LLMs. Copilot is covered by the EU Data Boundary and by Microsoft's data residency commitments (added Mar 1, 2024). Interactions are logged automatically in Purview Audit (Standard). Note: Anthropic-provided models are currently excluded from the EU Data Boundary.","plans":[{"name":"Microsoft 365 Copilot (commercial tenant)","audience":"enterprise","training":{"value":"no","note":"Prompts, responses and data accessed through Microsoft Graph are not used to train foundation LLMs.","source":"ms-priv","checked":"2026-10-22"},"retention":{"value":"User-deletable activity history; Purview retention","note":"Users can delete their Copilot activity history in the My Account portal. Admins manage retention through Purview.","source":"ms-priv","checked":"2026-10-22"},"sso":{"value":"yes – Microsoft Entra ID (required)","note":"Users must have a Microsoft Entra ID work or school account; sign-in follows your Entra policies (Conditional Access, MFA).","source":"ms-req","checked":"2026-10-22"},"scim":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"audit_logs":{"value":"yes","note":"Logged automatically in Audit (Standard) when auditing is on. Audit of non-Microsoft AI apps is billed pay-as-you-go and kept for 180 days.","source":"ms-audit","checked":"2026-10-22"},"data_residency":{"value":"yes","note":"EU traffic stays inside the EU Data Boundary. Copilot has been a covered workload in Product Terms data residency since Mar 1, 2024. ADR and Multi-Geo are available. Anthropic models are excluded from the EU Data Boundary.","source":"ms-priv","checked":"2026-10-22"},"dpa":{"value":"yes","note":"Covered by the Microsoft Product Terms and Data Protection Addendum.","source":"ms-priv","checked":"2026-10-22"},"notes":""}],"enforcement":[{"kind":"network","method":"Block personal Microsoft accounts and other tenants (Tenant Restrictions v2)","detail":"Create a TRv2 policy in Entra ID → External Identities → Cross-tenant access settings. Signal it with a proxy header `sec-Restrict-Tenant-Access-Policy: <TenantID>:<policyGUID>` on login.live.com, login.microsoft.com, login.microsoftonline.com and login.windows.net, or use Windows GPO/Intune or Global Secure Access. Requires Entra ID P1 or P2.","source":"ms-trv2","checked":"2026-10-22"}],"domains":[{"domain":"login.live.com","doc_stated":true,"source":"ms-trv2"},{"domain":"login.microsoftonline.com","doc_stated":true,"source":"ms-trv2"}]},{"id":"github-copilot","name":"GitHub Copilot","vendor":"GitHub (Microsoft)","category":"Coding assistant","seo_question":"Does GitHub Copilot train on your code?","summary":"On individual plans, GitHub may use prompts, suggestions and code snippets to train models unless the user opts out. GitHub does not use Copilot Business or Enterprise data for training. You can allow the business endpoints and block the individual-plan endpoint at the firewall.","plans":[{"name":"Free / Pro / Pro+ / Max (individual)","audience":"consumer","training":{"value":"opt-out","note":"GitHub may use interaction data (prompts, suggestions, code snippets) to train models. Users can opt out at github.com/settings/copilot/features.","source":"gh-plans","checked":"2026-10-22"},"retention":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"sso":{"value":"no","note":"The plans table lists SAML SSO as not included on individual plans.","source":"gh-plans","checked":"2026-10-22"},"scim":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"audit_logs":{"value":"no","note":"Copilot audit log events are documented for Copilot Business and Copilot Enterprise organizations/enterprises only.","source":"gh-audit","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":""},{"name":"Business","audience":"business","training":{"value":"no","note":"GitHub does not use Copilot Business data to train its models.","source":"gh-biz","checked":"2026-10-22"},"retention":{"value":"IDE/CLI: not retained; other surfaces: up to 28 days","note":"Default for Business/Enterprise: IDE chat, code completions and Copilot CLI inputs/outputs are not retained; other Copilot access (e.g. github.com, mobile) up to 28 days. User engagement data kept 2 years.","source":"gh-trust","checked":"2026-10-22"},"sso":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"scim":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"audit_logs":{"value":"yes","note":"Copilot events appear in the organization/enterprise audit log.","source":"gh-audit","checked":"2026-10-22"},"data_residency":{"value":"US or EU – only with GHE.com (GitHub Enterprise Cloud with data residency)","note":"An enterprise policy keeps Copilot inference and associated data in the designated region; regions today: United States, European Union.","source":"gh-dr","checked":"2026-10-22"},"dpa":{"value":"yes","note":"Copilot bought directly from GitHub is governed by the Generative AI Services Terms (since 5 Mar 2026), which bind you to the GitHub Data Protection Agreement.","source":"gh-terms","checked":"2026-10-22"},"notes":""},{"name":"Enterprise","audience":"enterprise","training":{"value":"no","note":"GitHub does not use Copilot Enterprise data to train its models.","source":"gh-biz","checked":"2026-10-22"},"retention":{"value":"IDE/CLI: not retained; other surfaces: up to 28 days","note":"Default for Business/Enterprise: IDE chat, code completions and Copilot CLI inputs/outputs are not retained; other Copilot access (e.g. github.com, mobile) up to 28 days. User engagement data kept 2 years.","source":"gh-trust","checked":"2026-10-22"},"sso":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"scim":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"audit_logs":{"value":"yes","note":"Copilot events appear in the organization/enterprise audit log.","source":"gh-audit","checked":"2026-10-22"},"data_residency":{"value":"US or EU – only with GHE.com (GitHub Enterprise Cloud with data residency)","note":"An enterprise policy keeps Copilot inference and associated data in the designated region; regions today: United States, European Union.","source":"gh-dr","checked":"2026-10-22"},"dpa":{"value":"yes","note":"Copilot bought directly from GitHub is governed by the Generative AI Services Terms (since 5 Mar 2026), which bind you to the GitHub Data Protection Agreement.","source":"gh-terms","checked":"2026-10-22"},"notes":""}],"enforcement":[{"kind":"network","method":"Allow business endpoints, block individual endpoint","detail":"Allowlist *.business.githubcopilot.com (Business) and/or *.enterprise.githubcopilot.com (Enterprise). Blocklist *.individual.githubcopilot.com.","source":"gh-net","checked":"2026-10-22"}],"domains":[{"domain":"*.business.githubcopilot.com","doc_stated":true,"source":"gh-net"},{"domain":"*.enterprise.githubcopilot.com","doc_stated":true,"source":"gh-net"},{"domain":"*.individual.githubcopilot.com","doc_stated":true,"source":"gh-net"}]},{"id":"perplexity","name":"Perplexity","vendor":"Perplexity AI","category":"AI search","seo_question":"Does Perplexity train on your data?","summary":"Not verified yet. Perplexity's help center and privacy policy returned HTTP 403 to our automated checks on 2026-10-22, so every field is marked unknown until someone checks the vendor pages by hand.","plans":[{"name":"Free / Pro","audience":"consumer","training":{"value":"opt-out","note":"The “AI Data Usage” setting lets your searches be used to improve Perplexity's models (Sonar); turn it off to exclude your data.","source":"px-acct","checked":"2026-10-22"},"retention":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"sso":{"value":"no","note":"SSO is listed as an Enterprise Pro addition on top of Pro features.","source":"px-ent","checked":"2026-10-22"},"scim":{"value":"no","note":"SCIM is exclusive to Enterprise organizations (50+ seats or at least one Enterprise Max seat).","source":"px-scim","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"Audit logs are exclusive to Enterprise organizations (50+ seats or at least one Enterprise Max seat).","source":"px-audit","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":""},{"name":"Enterprise Pro","audience":"enterprise","training":{"value":"no","note":"“Your organization's data is never used to train or fine-tune Perplexity's models”; agreements with third-party model providers also prohibit training.","source":"px-ent","checked":"2026-10-22"},"retention":{"value":"Session files: 7 days; sessions: admin-configurable (50+ seats or Enterprise Max)","note":"Files attached to sessions are deleted after 7 days. Custom session retention (and Enforce Incognito Mode) needs 50+ seats or at least one Enterprise Max seat; sessions outside the window are deleted within 7 days.","source":"px-ret","checked":"2026-10-22"},"sso":{"value":"yes","note":"SSO is included with Enterprise Pro (SAML 2.0; Okta guide available).","source":"px-ent","checked":"2026-10-22"},"scim":{"value":"yes – 50+ seats or ≥1 Enterprise Max seat","note":"SCIM (Okta, Entra ID, Google Workspace) is exclusive to Enterprise orgs with 50+ seats or at least one Enterprise Max user.","source":"px-scim","checked":"2026-10-22"},"audit_logs":{"value":"yes – 50+ seats or ≥1 Enterprise Max seat","note":"Audit logs are exclusive to Enterprise orgs with 50+ seats or at least one Enterprise Max user.","source":"px-audit","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":""}],"enforcement":[],"domains":[{"domain":"perplexity.ai","doc_stated":false,"source":null}]},{"id":"grammarly","name":"Grammarly","vendor":"Superhuman (Grammarly)","category":"Writing assistant","seo_question":"Does Grammarly train on your writing?","summary":"Product Improvement and Training is on by default for Free, Premium and Pro, including multi-user Pro bought online, where an admin can turn it off. On Enterprise and other sales-assisted plans it is off with no toggle. SSO comes with Business, Enterprise and Education. SCIM is Enterprise-only.","plans":[{"name":"Free / Premium / Pro (single user)","audience":"consumer","training":{"value":"opt-out","note":"Users can opt out with the Product Improvement and Training control.","source":"gr-train","checked":"2026-10-22"},"retention":{"value":"Until deleted; removed from backups 14 days after deletion","note":"Deleting an Editor document removes it from production immediately and from backups 14 days later.","source":"gr-wp","checked":"2026-10-22"},"sso":{"value":"no","note":"Plans page lists SAML SSO only for business tiers above Pro.","source":"gr-plans","checked":"2026-10-22"},"scim":{"value":"no","note":"Plans page lists SCIM only for business tiers above Pro.","source":"gr-plans","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"Audit Logs API is listed for Enterprise only.","source":"gr-plans","checked":"2026-10-22"},"data_residency":{"value":"no – US only (AWS US East, secondary US West)","note":"All server-side infrastructure is hosted on AWS in the United States.","source":"gr-wp","checked":"2026-10-22"},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":""},{"name":"Pro (multi-user, bought online)","audience":"business","training":{"value":"opt-out","note":"On by default. Only admins can turn it off, at account.grammarly.com/admin/data_settings.","source":"gr-train","checked":"2026-10-22"},"retention":{"value":"Until deleted; removed from backups 14 days after deletion","note":"Deleting an Editor document removes it from production immediately and from backups 14 days later.","source":"gr-wp","checked":"2026-10-22"},"sso":{"value":"no","note":"Plans page shows SAML SSO is not included in Pro.","source":"gr-plans","checked":"2026-10-22"},"scim":{"value":"no","note":"Plans page shows SCIM is not included in Pro.","source":"gr-plans","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"Audit Logs API is listed for Enterprise only.","source":"gr-plans","checked":"2026-10-22"},"data_residency":{"value":"no – US only (AWS US East, secondary US West)","note":"All server-side infrastructure is hosted on AWS in the United States.","source":"gr-wp","checked":"2026-10-22"},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":""},{"name":"Enterprise (sales-assisted)","audience":"enterprise","training":{"value":"no","note":"Product Improvement and Training is off with no toggle, so organization content is not used for training.","source":"gr-train","checked":"2026-10-22"},"retention":{"value":"Until deleted; removed from backups 14 days after deletion","note":"Deleting an Editor document removes it from production immediately and from backups 14 days later. Contract: data deleted on written request after termination.","source":"gr-wp","checked":"2026-10-22"},"sso":{"value":"yes","note":"SAML SSO is included in Business, Enterprise and Education plans.","source":"gr-sso","checked":"2026-10-22"},"scim":{"value":"yes","note":"SCIM is included in Enterprise plans.","source":"gr-scim","checked":"2026-10-22"},"audit_logs":{"value":"yes – Audit Logs API","note":"Listed in the Enterprise column of the plan comparison.","source":"gr-plans","checked":"2026-10-22"},"data_residency":{"value":"no – US only (AWS US East, secondary US West)","note":"All server-side infrastructure is hosted on AWS in the United States.","source":"gr-wp","checked":"2026-10-22"},"dpa":{"value":"yes","note":"The (Superhuman) Customer Business Agreement incorporates the Data Privacy Addendum by reference.","source":"gr-cba","checked":"2026-10-22"},"notes":""}],"enforcement":[],"domains":[{"domain":"grammarly.com","doc_stated":false,"source":null}]},{"id":"otter","name":"Otter.ai","vendor":"Otter.ai","category":"Meeting notetaker","seo_question":"Does Otter.ai train on your meetings?","summary":"Otter trains its models on recordings and transcripts after de-identifying them. Enterprise workspaces are opted out of training by default and get SAML SSO, SCIM, custom retention, admin logs and the option to disable the Notetaker per user.","plans":[{"name":"Basic / Pro / Business","audience":"consumer","training":{"value":"yes","note":"Otter de-identifies user data before training. Training is automatic and has no human review. We found no self-serve opt-out documented for non-Enterprise plans.","source":"ot-ps","checked":"2026-10-22"},"retention":{"value":"Until deleted; trash purged after 30 days","note":"Deleted conversations go to Trash and are auto-deleted after 30 days (immediately if you empty Trash).","source":"ot-ps","checked":"2026-10-22"},"sso":{"value":"no","note":"SSO is listed only in Enterprise (“Everything in Business, plus SSO, SCIM, Domain Capture”).","source":"ot-price","checked":"2026-10-22"},"scim":{"value":"no","note":"SCIM is listed only in Enterprise.","source":"ot-price","checked":"2026-10-22"},"audit_logs":{"value":"Business: activity logs only","note":"Business lists “activity logs, usage analytics”; Basic/Pro list none.","source":"ot-price","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"yes – in the Terms of Service","note":"The DPA (Appendix 1) is incorporated into the Terms of Service, which apply to all plans.","source":"ot-tos","checked":"2026-10-22"},"notes":""},{"name":"Enterprise","audience":"enterprise","training":{"value":"no","note":"Opted out of AI model training by default, enforced through the Enterprise agreement.","source":"ot-ent","checked":"2026-10-22"},"retention":{"value":"Custom retention policy","note":"Set up through your Otter account manager.","source":"ot-ent","checked":"2026-10-22"},"sso":{"value":"yes","note":"SAML SSO under Workspace → Manage Workspace → Settings → Identity & Access.","source":"ot-ent","checked":"2026-10-22"},"scim":{"value":"yes","note":"Directory Sync (SCIM), enabled through your account manager.","source":"ot-ent","checked":"2026-10-22"},"audit_logs":{"value":"yes","note":"Workspace Admin Logs record events by admins and members.","source":"ot-ent","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"yes","note":"DPA in Terms of Service Appendix 1; the Software Services Agreement incorporates it by reference.","source":"ot-tos","checked":"2026-10-22"},"notes":"Admins can disable the Notetaker per user, block it by meeting-title keyword, and disable AI features."}],"enforcement":[{"kind":"admin-console","method":"Disable Notetaker per user","detail":"Workspace → Manage Workspace → Members → toggle the Notetaker column (Enterprise).","source":"ot-ent","checked":"2026-10-22"},{"kind":"admin-console","method":"Block Notetaker by meeting-title keyword","detail":"Stop the Notetaker auto-joining meetings whose titles contain words like “confidential” (Enterprise, via your account manager).","source":"ot-ent","checked":"2026-10-22"}],"domains":[{"domain":"otter.ai","doc_stated":false,"source":null}]},{"id":"notion-ai","name":"Notion AI","vendor":"Notion Labs","category":"Workspace AI","seo_question":"Does Notion AI train on your data?","summary":"By default, neither Notion nor its AI providers train on your customer data, and its contracts prohibit providers from doing so. Full Notion AI comes with Business and Enterprise. SSO is Business and above. SCIM and audit logs are Enterprise-only.","plans":[{"name":"Free / Plus (limited AI trial)","audience":"consumer","training":{"value":"no","note":"By default, customer data is not used to train models, by Notion or its AI providers.","source":"no-sec","checked":"2026-10-22"},"retention":{"value":"30-day retention at LLM providers","note":"Plan comparison: “Data retention: 30 day retention” for Notion AI on Free/Plus/Business; zero retention on Enterprise.","source":"no-price","checked":"2026-10-22"},"sso":{"value":"no","note":"SAML SSO is only available on the Business or Enterprise Plan.","source":"no-sso","checked":"2026-10-22"},"scim":{"value":"no","note":"SCIM is only available on the Enterprise Plan.","source":"no-scim","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"Audit log is available to organization owners on the Enterprise Plan only.","source":"no-audit","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"yes","note":"The Notion DPA is incorporated by reference and applies wherever Notion processes GDPR personal data on a customer's behalf.","source":"no-gdpr","checked":"2026-10-22"},"notes":""},{"name":"Business","audience":"business","training":{"value":"no","note":"","source":"no-sec","checked":"2026-10-22"},"retention":{"value":"30-day retention at LLM providers","note":"Plan comparison: “Data retention: 30 day retention” for Notion AI on Business.","source":"no-price","checked":"2026-10-22"},"sso":{"value":"yes","note":"SAML SSO for Business and Enterprise.","source":"no-sso","checked":"2026-10-22"},"scim":{"value":"no","note":"SCIM is Enterprise-only.","source":"no-scim","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"Audit log is available to organization owners on the Enterprise Plan only.","source":"no-audit","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"yes","note":"The Notion DPA is incorporated by reference and applies wherever Notion processes GDPR personal data on a customer's behalf.","source":"no-gdpr","checked":"2026-10-22"},"notes":""},{"name":"Enterprise","audience":"enterprise","training":{"value":"no","note":"","source":"no-sec","checked":"2026-10-22"},"retention":{"value":"Zero data retention at LLM providers","note":"“Our LLM providers utilize zero data retention for Enterprise plan workspaces.”","source":"no-price","checked":"2026-10-22"},"sso":{"value":"yes","note":"","source":"no-sso","checked":"2026-10-22"},"scim":{"value":"yes","note":"","source":"no-scim","checked":"2026-10-22"},"audit_logs":{"value":"yes","note":"Audit logs for Enterprise organization owners.","source":"no-audit","checked":"2026-10-22"},"data_residency":{"value":"yes – US, EU (Japan/Korea via account team)","note":"Enterprise can move workspace data at rest to a selected region (page content, files, search index). Account info and some other data may stay outside the region.","source":"no-dr","checked":"2026-10-22"},"dpa":{"value":"yes","note":"The Notion DPA is incorporated by reference and applies wherever Notion processes GDPR personal data on a customer's behalf.","source":"no-gdpr","checked":"2026-10-22"},"notes":""}],"enforcement":[],"domains":[{"domain":"notion.so","doc_stated":false,"source":null}]},{"id":"zoom-ai-companion","name":"Zoom AI Companion","vendor":"Zoom","category":"Meeting assistant","seo_question":"Does Zoom AI Companion train on your meetings?","summary":"Zoom says it does not use customer audio, video, chat, screen sharing, attachments or other communications-like content to train its own or third-party AI models. Admins can turn AI features on or off and lock them for the account or for groups.","plans":[{"name":"Zoom Workplace (all paid tiers)","audience":"business","training":{"value":"no","note":"No customer audio, video, chat, screen sharing, attachments, polls, whiteboard content or reactions are used for training.","source":"zm-wp","checked":"2026-10-22"},"retention":{"value":"Admin-configurable; zero retention at third-party model providers","note":"Third-party model providers are under zero-data-retention terms (trust-and-safety exceptions). Admins can disable meeting transcripts or set transcript retention to 0 days and still get summaries; custom retention periods are available.","source":"zm-gov","checked":"2026-10-22"},"sso":{"value":"yes – SAML 2.0 or OIDC (needs approved vanity URL)","note":"Plan tier not stated on this page; SCIM docs require a Business or Education account.","source":"zm-sso","checked":"2026-10-22"},"scim":{"value":"yes – Business or Education account","note":"Prerequisites: Business or Education account with approved vanity URL and SSO enabled.","source":"zm-scim","checked":"2026-10-22"},"audit_logs":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"data_residency":{"value":"EU Infrastructure for EU Education/Enterprise customers","note":"Zoom offers dedicated EU infrastructure to house EU Education and Enterprise customers' accounts. Otherwise data is processed per the hosted data-center region and account settings.","source":"zm-eu","checked":"2026-10-22"},"dpa":{"value":"yes","note":"Zoom Global DPA (Nov 2024) forms part of the MSA/Terms of Service.","source":"zm-dpa","checked":"2026-10-22"},"notes":""}],"enforcement":[{"kind":"admin-console","method":"Disable and lock AI features","detail":"Admin Center → Settings → Zoom AI to toggle and lock features account-wide, or Users → Groups → Edit product settings → Zoom AI for a group.","source":"zm-kb","checked":"2026-10-22"}],"domains":[{"domain":"zoom.us","doc_stated":false,"source":null}]},{"id":"cursor","name":"Cursor","vendor":"Anysphere","category":"Coding assistant","seo_question":"Does Cursor train on your code?","summary":"With Privacy Mode on, Cursor does not train on your data and has zero-retention agreements with its model providers. With it off, code and prompts can be used for training. Individuals choose for themselves. Teams and Enterprise can enforce Privacy Mode org-wide. Enterprise adds SCIM, audit logs, MDM allowed-team policies and a tenancy-restriction header.","plans":[{"name":"Hobby / Pro (individual)","audience":"consumer","training":{"value":"user-choice","note":"Privacy Mode is the user's choice. With it off, Cursor may use codebase data, prompts and editor actions to train its models.","source":"cu-data","checked":"2026-10-22"},"retention":{"value":"Zero retention at model providers with Privacy Mode on","note":"Abuse-flagged prompts may be kept for investigation.","source":"cu-data","checked":"2026-10-22"},"sso":{"value":"no","note":"Plan comparison: SAML/OIDC SSO is only ticked for Teams and Enterprise.","source":"cu-price","checked":"2026-10-22"},"scim":{"value":"no","note":"Plan comparison: SCIM seat management is Enterprise-only.","source":"cu-price","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"Plan comparison: audit logs are Enterprise-only.","source":"cu-price","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":""},{"name":"Teams","audience":"business","training":{"value":"no (when enforced)","note":"Admins can enforce Privacy Mode org-wide. New members inherit the team setting.","source":"cu-ent","checked":"2026-10-22"},"retention":{"value":"Admin-set custom chat retention; zero retention at model providers in Privacy Mode","note":"Plan comparison lists “Custom Chat data retention” for Teams; Privacy Mode keeps code from being stored by model providers.","source":"cu-price","checked":"2026-10-22"},"sso":{"value":"yes","note":"SAML 2.0 SSO at no extra cost on Teams and Enterprise.","source":"cu-sso","checked":"2026-10-22"},"scim":{"value":"no","note":"The plan comparison shows SCIM only on Enterprise.","source":"cu-ent","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"Audit logs are Enterprise-only.","source":"cu-ent","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":""},{"name":"Enterprise","audience":"enterprise","training":{"value":"no (when enforced)","note":"","source":"cu-ent","checked":"2026-10-22"},"retention":{"value":"Admin-set custom chat retention; zero retention at model providers in Privacy Mode","note":"Plan comparison lists “Custom Chat data retention” for Enterprise; Privacy Mode keeps code from being stored by model providers.","source":"cu-price","checked":"2026-10-22"},"sso":{"value":"yes","note":"","source":"cu-sso","checked":"2026-10-22"},"scim":{"value":"yes","note":"Requires SSO.","source":"cu-iam","checked":"2026-10-22"},"audit_logs":{"value":"yes","note":"Covers authentication, user management and admin actions, with SIEM streaming.","source":"cu-ent","checked":"2026-10-22"},"data_residency":{"value":"US-only program (inference, processing, storage); EU+UK inference-only","note":"Customers enrolled in the data residency program can keep inference, processing and storage in the US; EU + UK coverage is inference-only.","source":"cu-gov","checked":"2026-10-22"},"dpa":{"value":"yes","note":"The Cursor DPA governs processing under the Master Services Agreement.","source":"cu-dpa","checked":"2026-10-22"},"notes":"HIPAA BAA available for Enterprise."}],"enforcement":[{"kind":"network","method":"Restrict to your org/teams (header)","detail":"Have your proxy add `x-cursor-allowed-tenants: v1.orgs=<ids>;teams=<ids>` on requests to api2.cursor.sh and cursor.com. A blank or malformed value is refused.","source":"cu-tr","checked":"2026-10-22"},{"kind":"mdm","method":"MDM: allowed team IDs and extensions","detail":"MDM policies can enforce allowed team IDs and extensions on managed devices (Enterprise).","source":"cu-ent","checked":"2026-10-22"}],"domains":[{"domain":"cursor.com","doc_stated":true,"source":"cu-tr"},{"domain":"api2.cursor.sh","doc_stated":true,"source":"cu-tr"}]},{"id":"deepseek","name":"DeepSeek","vendor":"Hangzhou DeepSeek AI","category":"Chat assistant","seo_question":"Is DeepSeek safe for work? Does it train on your data?","summary":"DeepSeek's privacy policy says it collects, processes and stores personal data in the People's Republic of China, uses it to train and improve its models, and keeps it “as long as necessary”. The policy mentions a right to opt out of training, but we found no enterprise plan, SSO or admin controls.","plans":[{"name":"DeepSeek chat / app","audience":"consumer","training":{"value":"opt-out","note":"Personal data is used to train and improve models. The policy lists “the right to opt-out of using your Personal Data for training”, but we did not verify how to exercise it.","source":"ds-pp","checked":"2026-10-22"},"retention":{"value":"“As long as necessary”","note":"No fixed period is stated.","source":"ds-pp","checked":"2026-10-22"},"sso":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"scim":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"audit_logs":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"data_residency":{"value":"People's Republic of China","note":"Data is directly collected, processed and stored in the PRC.","source":"ds-pp","checked":"2026-10-22"},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":""}],"enforcement":[],"domains":[{"domain":"chat.deepseek.com","doc_stated":false,"source":null},{"domain":"deepseek.com","doc_stated":false,"source":null}]},{"id":"midjourney","name":"Midjourney","vendor":"Midjourney, Inc.","category":"Image/video generation","seo_question":"Is Midjourney private? Does it train on your prompts?","summary":"Midjourney's EU training-content summary says user interaction data (prompts and images) is used for training. Creations are public on the website unless you use Stealth Mode, which only Pro and Mega plans have. Even with Stealth Mode, anything made in public Discord channels stays visible.","plans":[{"name":"Basic / Standard","audience":"consumer","training":{"value":"yes","note":"User input and prompts (text and image) are used to train the model. We found no opt-out.","source":"mj-train","checked":"2026-10-22"},"retention":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"sso":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"scim":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"audit_logs":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":"Stealth Mode is not available on these plans, so creations are visible on the website."},{"name":"Pro / Mega","audience":"consumer","training":{"value":"yes","note":"","source":"mj-train","checked":"2026-10-22"},"retention":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"sso":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"scim":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"audit_logs":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"notes":"Stealth Mode can hide creations on the website. Public Discord channels stay visible."}],"enforcement":[],"domains":[{"domain":"midjourney.com","doc_stated":false,"source":null}]},{"id":"fireflies","name":"Fireflies.ai","vendor":"Fireflies.ai","category":"Meeting notetaker","seo_question":"Does Fireflies.ai train on your meetings?","summary":"Fireflies says it does not train on your data by default and has a zero-day retention policy with its vendors. Enterprise ($39/seat/month, billed annually) adds SSO and SCIM, audit logs via the API, custom retention, HIPAA and private storage.","plans":[{"name":"Free / Pro / Business","audience":"business","training":{"value":"no","note":"“We don't train on it by default.”","source":"ff-sec","checked":"2026-10-22"},"retention":{"value":"While account active; deleted within 30 days of closure","note":"Zero Data Retention for meeting content at third-party vendors (not stored or used for training by them).","source":"ff-pp","checked":"2026-10-22"},"sso":{"value":"no","note":"SSO + SCIM is listed as an Enterprise addition (“Everything in Business, plus…”).","source":"ff-price","checked":"2026-10-22"},"scim":{"value":"no","note":"SSO + SCIM is listed as an Enterprise addition.","source":"ff-price","checked":"2026-10-22"},"audit_logs":{"value":"no","note":"Audit Logs (API) are listed as an Enterprise addition.","source":"ff-price","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"yes – self-serve signing","note":"Fireflies invites customers to sign its GDPR DPA online.","source":"ff-dpa","checked":"2026-10-22"},"notes":""},{"name":"Enterprise","audience":"enterprise","training":{"value":"no","note":"","source":"ff-sec","checked":"2026-10-22"},"retention":{"value":"Custom data retention","note":"","source":"ff-price","checked":"2026-10-22"},"sso":{"value":"yes","note":"SSO + SCIM is listed under Enterprise.","source":"ff-price","checked":"2026-10-22"},"scim":{"value":"yes","note":"","source":"ff-price","checked":"2026-10-22"},"audit_logs":{"value":"yes","note":"Audit logs (API).","source":"ff-price","checked":"2026-10-22"},"data_residency":{"value":"unknown","note":"Not verified from a vendor-owned source yet.","source":null,"checked":null},"dpa":{"value":"yes – self-serve signing","note":"Fireflies invites customers to sign its GDPR DPA online.","source":"ff-dpa","checked":"2026-10-22"},"notes":"HIPAA BAA available on Enterprise with Private Storage."}],"enforcement":[],"domains":[{"domain":"fireflies.ai","doc_stated":false,"source":null}]},{"id":"slack-ai","name":"Slack AI","vendor":"Salesforce (Slack)","category":"Workspace AI","seo_question":"Does Slack train AI on your messages?","summary":"Slack says it does not build generative AI models from customer data. Its non-generative global ML models (emoji and channel recommendations, for example) do learn from customer data unless an Owner emails feedback@slack.com to opt out.","plans":[{"name":"All Slack plans","audience":"business","training":{"value":"no (generative) / opt-out (global ML)","note":"No generative models are built from customer data. Global ML models use it unless you opt out by email with the subject “Slack Global model opt-out request”.","source":"sl-priv","checked":"2026-10-22"},"retention":{"value":"Free: deleted after 1 year; paid: kept for life by default (adjustable)","note":"Paid plans keep data for the workspace's lifetime unless admins set retention policies.","source":"sl-ret","checked":"2026-10-22"},"sso":{"value":"Free: none · Pro: Google OAuth · Business+: SAML · Enterprise+: multi-SAML","note":"From the plan comparison table.","source":"sl-price","checked":"2026-10-22"},"scim":{"value":"Business+ and Enterprise+","note":"Free and Pro have no SCIM.","source":"sl-price","checked":"2026-10-22"},"audit_logs":{"value":"Enterprise+ only","note":"Audit logs are not on Free, Pro or Business+.","source":"sl-price","checked":"2026-10-22"},"data_residency":{"value":"Business+ and Enterprise+","note":"Choose the region where certain data at rest is stored.","source":"sl-price","checked":"2026-10-22"},"dpa":{"value":"yes – all plans","note":"“Our Data Processing Addenda are available to all customers regardless of the Slack plan they are using.”","source":"sl-faq","checked":"2026-10-22"},"notes":""}],"enforcement":[{"kind":"vendor-request","method":"Opt out of global ML models","detail":"An Org or Workspace Owner emails feedback@slack.com with the workspace URL and the subject “Slack Global model opt-out request”.","source":"sl-priv","checked":"2026-10-22"}],"domains":[{"domain":"slack.com","doc_stated":false,"source":null}]}],"changelog":[{"date":"2026-10-22","tool":null,"type":"baseline","title":"CanWeUseIt baseline snapshot","detail":"All 15 tools checked against the vendor pages listed. Content hashes are stored for change detection.","source":null},{"date":"2026-10-01","tool":"perplexity","type":"product-change","title":"Perplexity Enterprise organization file repository retired","detail":"Admins had to download org-repository files by Oct 1, 2026; remaining files are deleted. Projects and personal files keep their own retention.","source":"px-ret"},{"date":"2026-08-25","tool":"cursor","type":"page-updated","title":"Cursor Security page updated","detail":"The page shows “Last updated August 25, 2026”.","source":"cu-sec"},{"date":"2026-08-18","tool":"claude","type":"page-updated","title":"Anthropic commercial training article dated Aug 18, 2026","detail":"Says commercial inputs and outputs are not used for training by default. Feedback is kept for up to 5 years.","source":"ant-train"},{"date":"2026-07-01","tool":"claude","type":"page-updated","title":"Anthropic consumer retention article dated Jul 1, 2026","detail":"30-day deletion window, up to 5 years if training is allowed, and longer retention for flagged chats.","source":"ant-ret"},{"date":"2026-06-15","tool":"claude","type":"page-updated","title":"Claude audit logs article dated Jun 15, 2026","detail":"Audit logs are Enterprise-only, with a 180-day export window.","source":"ant-audit"},{"date":"2026-03-17","tool":"midjourney","type":"policy-published","title":"Midjourney publishes Public Summary of Training Content","detail":"Confirms that user input and prompts are used to train its image and video models.","source":"mj-train"},{"date":"2026-03-05","tool":"github-copilot","type":"terms-change","title":"GitHub moves Copilot Business/Enterprise to Generative AI Services Terms","detail":"New subscriptions and renewals from 5 March 2026 use the GitHub Generative AI Services Terms; the Copilot Product Specific Terms are archived.","source":"gh-terms"},{"date":"2026-01-08","tool":"chatgpt","type":"page-updated","title":"OpenAI Enterprise privacy page updated","detail":"Lists ChatGPT Business, Enterprise, Healthcare, Edu, Teachers and API as not used for training by default.","source":"oai-ent"},{"date":"2025-10-29","tool":"grammarly","type":"terms-change","title":"Grammarly business terms now issued as the Superhuman Customer Business Agreement","detail":"The Customer Business Agreement at grammarly.com is now the Superhuman Customer Business Agreement (effective Oct 29, 2025) and the online DPA is the Superhuman Data Privacy Addendum.","source":"gr-cba"},{"date":"2025-10-08","tool":"claude","type":"policy-change","title":"Claude consumer training choice deadline","detail":"Existing Free, Pro and Max users had to make a model-training choice by this date to keep using Claude.","source":"ant-consumer"},{"date":"2025-08-28","tool":"claude","type":"policy-change","title":"Anthropic: consumer chats may be used for training (user choice), 5-year retention","detail":"Applies to Free, Pro and Max, including Claude Code. Not to Claude for Work, the API, Bedrock or Vertex.","source":"ant-consumer"},{"date":"2024-03-01","tool":"microsoft-365-copilot","type":"policy-change","title":"Microsoft Copilot added to data residency commitments","detail":"Added as a covered workload in the Microsoft Product Terms data residency commitments.","source":"ms-priv"}]}