Skip to main content
AI Governance
Rule Watch™

Vendor Privacy Scorecard · GitHub (Microsoft)

GitHub Copilot: is it safe for client information?

An AI coding assistant. Business and Enterprise plans keep your code out of training.

Depends on plan and settings

Bottom line

Strong on Business and Enterprise. Individual plans depend on each developer's settings.

Does it train on your data? By plan

  • Free and Pro (individual): User or admin setting

    Each user controls whether their data is used to improve products.

  • Business and Enterprise: No training

    Code and prompts are not used to train models.

What an auditor will ask

Trains AI on your data? Depends on plan
Business and Enterprise do not train. Individual plans depend on settings.
Retention you can control? Depends on plan
Business plans discard IDE prompts after the suggestion is returned. Chat history follows plan terms.
Signs a HIPAA BAA? No
Not designed for health information. Keep patient data out of code and prompts.
Staff may read your content? No
Business content is not reviewed for training.

Security certifications

  • SOC 2 Type II
  • ISO/IEC 27001

Set it up the safe way

  1. Buy Copilot Business or Enterprise for anyone writing code for the business.
  2. Turn on the public-code filter in organization settings.
  3. Keep client data and secrets out of code comments and prompts.

GitHub (Microsoft) trust centerBusiness privacy terms

Summarized from GitHub (Microsoft)'s published terms, last checked 10/1/2026. Vendors change terms. Confirm every point against the agreement you actually signed. This is not legal advice.

See every vendor scorecard

Using GitHub Copilot at work? An unvetted tool can cost you your license.

When an employee pastes client information or confidential files into GitHub Copilot without the correct safeguards, licensing boards and regulatory bodies hold you responsible. AI Governance Rule Watch™ documents your approved tool roster, vendor reviews, and staff guidelines in permanent diligence records ready for any audit.

Protect my business for $67/month Or $670/year · 2 months free

Founding member rate. Cancel anytime. Plus applicable taxes. Renews until canceled. Not legal advice and not a compliance certification.