What the common AI tools do with your data.
What the common AI tools do with your data, in plain language, so a company can decide what is safe to use for what. Vendors can claim and correct their entries. Every row must be checked against the vendor's current policy page before it is marked verified; policies change often.
Public information onlyInternal informationCustomer or personal data: needs the right tier, settings, and a DPA
| Tool | Category | Trains on your data? | Retention | DPA | Safe for | Status |
|---|---|---|---|---|---|---|
| ChatGPT (Free and Plus) OpenAI | Assistant | Vendor states consumer conversations may be used to improve models unless the user turns off training in settings (confirm). | Per account settings (confirm) | No (consumer terms) | Public information only | Verify |
| ChatGPT Business and Enterprise OpenAI | Assistant | Vendor states business data is not used to train models by default (confirm). | Admin-controlled (confirm) | Available | Internal information; customer data with a DPA and admin controls | Verify |
| Microsoft 365 Copilot Microsoft | Assistant in Office apps | Vendor states prompts and responses are not used to train foundation models and stay within the tenant boundary (confirm). | Tenant retention policies apply (confirm) | Covered by Microsoft 365 terms | Internal information; customer data under tenant controls | Verify |
| Gemini for Google Workspace | Assistant in Workspace | Vendor states Workspace content is not used to train models outside the domain without permission (confirm). | Workspace retention applies (confirm) | Covered by Workspace terms | Internal information; customer data under Workspace controls | Verify |
| Claude (consumer) Anthropic | Assistant | Vendor's consumer terms allow training on conversations unless the user opts out (confirm current setting). | Per account settings (confirm) | No (consumer terms) | Public information only | Verify |
| Claude for Work and Enterprise Anthropic | Assistant | Vendor states commercial customer data is not used to train models by default (confirm). | Admin-controlled (confirm) | Available | Internal information; customer data with a DPA | Verify |
| GitHub Copilot Business GitHub (Microsoft) | Coding assistant | Vendor states prompts and suggestions are not retained for training on business plans (confirm). | Not retained beyond the session on business plans (confirm) | Covered by GitHub terms | Internal code; review licensing of suggestions | Verify |
| Zoom AI Companion Zoom | Meeting assistant | Vendor states customer audio, video, and chat are not used to train its AI models (confirm). | Account settings (confirm) | Available | Internal information; tell participants it is on | Verify |
| Otter.ai Otter | Meeting transcription | Check the current policy on use of de-identified data for model improvement and the business plan settings (confirm). | Per plan (confirm) | Business plans (confirm) | Internal information only until verified; consent of participants required | Verify |
| Grammarly Grammarly | Writing assistant | Check the current policy; business plans offer controls on data use (confirm). | Per plan (confirm) | Business plans | Internal information with business plan settings | Verify |
| Midjourney Midjourney | Image generation | Vendor terms allow use of prompts and images for training; images are public by default except on stealth plans (confirm). | Public gallery by default (confirm) | No | Public information only; label outputs as AI-generated | Verify |
| Notion AI Notion | Workspace assistant | Vendor states customer data is not used to train models and is processed by its providers without retention (confirm). | Workspace retention (confirm) | Business plans | Internal information | Verify |
Every row is checked against the vendor's current policy page before it is marked checked, and the date is shown. Policies change often; follow the source link before relying on a row.