Skip to main content

Vendor Privacy Scorecard · Grammarly

Grammarly: is it safe for client information?

Writing suggestions and AI rewrites in email, documents and the browser.

Depends on plan and settings

Bottom line

Use Grammarly Business or Enterprise for work. It reads everything staff type in covered apps, so control where it runs.

Does it train on your data? By plan

  • Free and Pro (personal): User or admin setting

    Personal account text may be used to improve the product under consumer terms.

  • Business and Enterprise: No training

    Grammarly states business customer content is not used to train its models.

What an auditor will ask

Trains AI on your data? Depends on plan
Business plans do not train. Personal plans follow consumer terms.
Retention you can control? Depends on plan
Business admins have data controls. Personal accounts follow consumer terms.
Signs a HIPAA BAA? Depends on plan
Grammarly offers a BAA for eligible Enterprise customers. Not on personal plans.
Staff may read your content? Depends on plan
Follows plan terms.

Security certifications

  • SOC 2 Type II
  • ISO/IEC 27001
  • ISO/IEC 27017
  • ISO/IEC 27018
  • ISO/IEC 42001

Set it up the safe way

  1. Buy Business or Enterprise for staff who write client communications.
  2. Block personal Grammarly extensions on work computers.
  3. Turn Grammarly off inside patient or client record systems unless your BAA covers it.

Grammarly trust centerBusiness privacy terms

Summarized from Grammarly's published terms, last checked 10/1/2026. Vendors change terms. Confirm every point against the agreement you actually signed. This is not legal advice.

See every vendor scorecard

Using Grammarly at work? An unvetted tool can cost you your license.

When an employee pastes client information or confidential files into Grammarly without the correct safeguards, licensing boards and regulatory bodies hold you responsible. AI Governance Rule Watch™ documents your approved tool roster, vendor reviews, and staff guidelines in permanent diligence records ready for any audit.

Founding member rate. Cancel anytime. Plus applicable taxes. Renews until canceled. Not legal advice and not a compliance certification.