AI tool privacy · GitHub (Microsoft)
GitHub Copilot and your company’s data
By David Michaelson, MS Last checked October 23, 2026
The short answer
Since April 24, 2026, GitHub uses Copilot Free, Pro, and Pro+ interaction data, including code snippets, to train its AI models unless you opt out; GitHub says it does not use Copilot Business or Enterprise data to train its models.
Safer setup: Give developers seats on Copilot Business or Enterprise through your company GitHub organization, not personal Free or Pro plans.
Plan by plan
Each answer comes from GitHub’s own policy or help pages, with the link and the date we read it. Setting names are quoted exactly as GitHub writes them.
We could not confirm 5 answers on GitHub’s own pages. Those answers say so in plain words and link to the page we checked.
| Question | Free, Pro, and Pro+ | Business and Enterprise |
|---|---|---|
| Trains on your data by default? | Yes, unless you opt out. Since April 24, 2026, GitHub uses inputs, outputs, code snippets, and related context from these plans to train and improve its AI models. If you opted out earlier, your choice was kept. Read on October 23, 2026 Source: github.blog | No. GitHub says it does not use Copilot Business or Enterprise data to train its models, and these plans were not affected by the April 2026 change. Read on October 23, 2026 Source: github.com |
| How long your data is kept | As long as your account is active, under GitHub’s general privacy statement. The pages we read give no separate retention period for Copilot prompts and suggestions on these plans. Read on October 23, 2026 Source: docs.github.com | The pages we read do not give a retention period for prompts and suggestions on these plans. Page checked: github.com, October 23, 2026 |
| Who can see it | The pages we read do not say which GitHub or Microsoft staff can read Copilot prompts on these plans. Page checked: github.blog, October 23, 2026 | The pages we read do not say which GitHub or Microsoft staff can read Copilot prompts on these plans. Page checked: github.com, October 23, 2026 |
| Where data is stored | In your local region, the United States, and other countries where GitHub or its service providers operate, under GitHub’s general privacy statement. Read on October 23, 2026 Source: docs.github.com | The pages we read do not say where Copilot prompts and suggestions are stored. Page checked: github.com, October 23, 2026 |
| How to delete | You can ask GitHub to delete your data, with some legal and security exceptions. The pages we read do not describe a way to delete individual Copilot interactions. Read on October 23, 2026 Source: docs.github.com | The pages we read do not describe how to delete Copilot prompts or suggestions on these plans. Page checked: github.com, October 23, 2026 |
Safer setup, step by step
- Buy Copilot Business or Enterprise seats for your developers. GitHub says it does not train its models on data from these plans. Source: github.com for this step
- Anyone using a personal Copilot plan for work should open their GitHub settings and opt out of model training under “Privacy.” Source: github.blog for this step
- Keep customer data, secrets, and production records out of prompts and open files while Copilot is active. Source: github.blog for this step
What to write in your policy
Developers use GitHub Copilot only through our company Copilot Business seats. Customer data and secrets stay out of prompts and open files.
Building your own approved tools list? The SafeStart Handbook includes one, with company accounts and safer privacy settings.