Vendors · AI applications · GitHub Copilot

GitHub Copilot business data trains no GitHub model, GitHub says

GitHub Copilot Business and Enterprise. Each line below quotes GitHub Copilot’s own pages as kept on 3 Nov 2026.

GitHub Copilot’s questionnaire: nine buyer questions, each answered from these pages.

GitHub Copilot’s record as an AI bill of materials: CycloneDX · SPDX. Not signed.

GitHub Copilot’s status history: every incident on its status page, kept from its own feed.

What the pages say

each value, then the words it is read from
Training on business and API data
No

No. GitHub does not use either Copilot Business or Enterprise data to train its models.

Answer to “Does GitHub use Copilot Business or Enterprise data to train GitHub’s model?” GitHub Copilot, frequently asked questions, kept 26 Oct 2026 · sha256 30826739dddc

Training on free and consumer use
Yes on Free, Pro and Pro+, unless the user opts out

Starting on April 24, GitHub may also use interactions from users with a Copilot Free, Copilot Pro, and Copilot Pro+ subscription - including inputs, outputs, code snippets, and associated context - to train and improve our AI models unless they have opted out.

GitHub Copilot, frequently asked questions, kept 26 Oct 2026 · sha256 30826739dddc

How long API data is kept
Not kept in the IDE; 28 days for other use, with listed exceptions

Access through IDE for Chat and Code Completions: Prompts and Suggestions: Not retained User Engagement Data: Kept for two years. Feedback Data: Stored for as long as needed for its intended purpose. All other GitHub Copilot access and use: Prompts and Suggestions: Retained for 28 days.

These are the default settings for Copilot Business and Enterprise customers. GitHub Copilot, frequently asked questions, kept 26 Oct 2026 · sha256 30826739dddc

Option to keep no data
Not stated in the pages kept
Searched: GitHub Copilot, frequently asked questions; GitHub Subprocessors; Usage limits for GitHub Copilot.
Where data is processed and stored
Listed for each sub-processor; AI inference in the US and other countries

Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore

Each row of the list gives a “Location of Processing”. Fireworks AI lists “United States, Germany, Iceland”. GitHub Subprocessors, kept 26 Oct 2026 · sha256 fafcdb7003b5

Sub-processors
A published list; new names 30 days in advance

GitHub publishes the names of any new subprocessors for its online services at least 30 days in advance of the subprocessor’s authorization to perform services that may involve access to customer data or personal data.

GitHub Subprocessors, kept 26 Oct 2026 · sha256 fafcdb7003b5

Certifications and audits
Not stated in the pages kept
Searched: GitHub Copilot, frequently asked questions; GitHub Subprocessors; Usage limits for GitHub Copilot.
Data processing agreement
GitHub’s Data Protection Agreement, for business customers

These practices are outlined in GitHub’s Data Protection Agreement (DPA), which details our data handling commitments to our data controller customers.

GitHub Copilot, frequently asked questions, kept 26 Oct 2026 · sha256 30826739dddc

Published usage limits
A monthly allowance of AI credits per plan; on Business and Enterprise, admins set limits on paid usage beyond it; GitHub’s own rate limits have no published numbers

On GitHub Copilot Business and GitHub Copilot Enterprise, admins set usage limits and decide whether additional paid usage is allowed. If it isn't, Copilot pauses until the next cycle.

The same page says: “Every plan includes a monthly allowance: 1 AI credit = $0.01 USD.” The usage-limits page says GitHub uses rate limits for fairness and against abuse, and gives no figures. GitHub Copilot, frequently asked questions, kept 26 Oct 2026 · sha256 30826739dddc

Pages kept

each copy is held with the sha256 of its bytes as served
Page The page’s date Newest copy Checks
GitHub Copilot, frequently asked questionsTraining and retention, by plan none printed 26 Oct 2026, 863 KBsha256 30826739dddc8befe67f24935ff304a2a9924bccdae74cb429ccfe8f73d2b423
  • 26 Oct 2026: kept
GitHub SubprocessorsSubprocessors under the GitHub Data Protection Agreement none printed 26 Oct 2026, 137 KBsha256 fafcdb7003b578650b127a8fab76f9970f860fb04ea0e0cc28f50c4ff0f81407
  • 26 Oct 2026: kept
Usage limits for GitHub CopilotRate limits and usage limits none printed 3 Nov 2026, 558 KBsha256 dfea5333355778947336bd840fda725088cccae59235db779acad4252c308334
  • 3 Nov 2026: kept

No kept page of GitHub Copilot has changed

first kept on 26 Oct 2026

Sources

vendors.csv Every dataset → Status → Glossary →