Does your AI tool train on your company data?
A searchable tracker of the data terms behind 58 common work AI tools: whether they train on your data (business and personal plans), how long they keep it, and which assurances they offer. Every answer links to the vendor's own page. 59% of fields confirmed from vendor pages · last checked Oct 17, 2026.
35Don't train by default
10Train by default
4Depends on plan, setup or app
9Not stated by vendor
Why this matters
Using a tool and letting its vendor train on your data are different decisions.
Read the full explanation, with sources →- Training is hard to undoOnce your data trains a model, you can't pull it back out. Opting out later only stops future use.
- Models can memorize and repeat what they were trained onResearch shows AI models can reproduce pieces of their training data word for word, including contact details and code.
- It can conflict with your contracts and regulationsCustomer NDAs and DPAs, GDPR, HIPAA and professional confidentiality rules can limit how data may be used.
- What "de-identified" does and doesn't protect"De-identified" removes names, not the substance. Your strategy, numbers and code stay in.
Plan
Category
Must have
58 of 58 tools
Adobe Firefly
Adobe · DesignBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
0/7 assurancesChecked Oct 17, 2026
Airtable AI
Airtable · ProductivityBusiness
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: stated
6/7 assurancesChecked Oct 17, 2026
Amazon Bedrock
AWS · Model APIBusiness
SOC 2 Type II: partialISO 27001: statedDPA: not foundBAA: statedZero retention: not found
2/7 assurancesChecked Oct 17, 2026
Amazon Q Business
AWS · AssistantBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: statedZero retention: not found
1/7 assurancesChecked Oct 17, 2026
Asana AI
Asana · ProductivityBusiness
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Atlassian Rovo / Atlassian Intelligence
Atlassian · ProductivityBusiness
SOC 2 Type II: partialISO 27001: statedDPA: statedBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Azure OpenAI in Foundry Models
Microsoft · Model APIBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
1/7 assurancesChecked Oct 17, 2026
Box AI
Box · ContentBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: stated
2/7 assurancesChecked Oct 17, 2026
Canva AI (Magic Studio)
Canva · DesignBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: statedBAA: not foundZero retention: not found
1/7 assurancesChecked Oct 17, 2026
ChatGPT (Free / Plus / Pro)
OpenAI · AssistantPersonal
SOC 2 Type II: not checked yetISO 27001: not checked yetDPA: not checked yetBAA: not checked yetZero retention: not checked yet
0/7 assurancesChecked Oct 17, 2026
ChatGPT Enterprise / Business
OpenAI · AssistantBusiness
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: not found
6/7 assurancesChecked Oct 17, 2026
Claude (Free / Pro / Max)
Anthropic · AssistantPersonal
SOC 2 Type II: not checked yetISO 27001: not checked yetDPA: not checked yetBAA: not checked yetZero retention: not checked yet
0/7 assurancesChecked Oct 17, 2026
Claude API
Anthropic · Model APIBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: statedBAA: statedZero retention: stated
3/7 assurancesChecked Oct 17, 2026
Claude for Work (Team / Enterprise)
Anthropic · AssistantBusiness
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: not found
5/7 assurancesChecked Oct 17, 2026
ClickUp Brain
ClickUp · ProductivityBusiness
SOC 2 Type II: partialISO 27001: statedDPA: statedBAA: statedZero retention: stated
6/7 assurancesChecked Oct 17, 2026
Copy.ai
Copy.ai · WritingBusiness
SOC 2 Type II: partialISO 27001: not foundDPA: not foundBAA: not foundZero retention: stated
1/7 assurancesChecked Oct 17, 2026
Cursor (Teams / Enterprise)
Anysphere · CodingBusiness
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: not foundZero retention: stated
4/7 assurancesChecked Oct 17, 2026
DeepL Pro
DeepL · WritingBusiness
SOC 2 Type II: statedISO 27001: not foundDPA: not foundBAA: not foundZero retention: stated
2/7 assurancesChecked Oct 17, 2026
Dropbox Dash / Dropbox AI
Dropbox · ContentBusiness
SOC 2 Type II: partialISO 27001: statedDPA: not foundBAA: statedZero retention: not found
2/7 assurancesChecked Oct 17, 2026
ElevenLabs
ElevenLabs · VoiceBusiness
SOC 2 Type II: partialISO 27001: statedDPA: not foundBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Fathom
Fathom · Meeting notesBusiness
SOC 2 Type II: statedISO 27001: vendor says noDPA: statedBAA: statedZero retention: not found
3/7 assurancesChecked Oct 17, 2026
Figma AI
Figma · DesignBusiness
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: not foundZero retention: not found
3/7 assurancesChecked Oct 17, 2026
Fireflies.ai
Fireflies.ai · Meeting notesBusiness
SOC 2 Type II: statedISO 27001: not foundDPA: statedBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Gamma
Gamma · DesignBusiness
SOC 2 Type II: partialISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
0/7 assurancesChecked Oct 17, 2026
Gemini app (personal Google account)
Google · AssistantPersonal
SOC 2 Type II: not checked yetISO 27001: not checked yetDPA: not checked yetBAA: not checked yetZero retention: not checked yet
0/7 assurancesChecked Oct 17, 2026
Gemini for Google Workspace
Google · AssistantBusiness
SOC 2 Type II: partialISO 27001: statedDPA: statedBAA: statedZero retention: not found
5/7 assurancesChecked Oct 17, 2026
GitHub Copilot Business / Enterprise
GitHub (Microsoft) · CodingBusiness
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: not foundZero retention: stated
4/7 assurancesChecked Oct 17, 2026
Glean
Glean · SearchBusiness
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: statedZero retention: not found
4/7 assurancesChecked Oct 17, 2026
Gong
Gong · Revenue intelligenceBusiness
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: vendor says noZero retention: not found
4/7 assurancesChecked Oct 17, 2026
Grammarly Business / Enterprise
Grammarly (Superhuman) · WritingBusiness
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: statedZero retention: not found
4/7 assurancesChecked Oct 17, 2026
HubSpot AI (Breeze)
HubSpot · CRMBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: statedBAA: not foundZero retention: partial
1/7 assurancesChecked Oct 17, 2026
Intercom Fin
Intercom · SupportBusiness
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: statedZero retention: stated
6/7 assurancesChecked Oct 17, 2026
Jasper
Jasper AI · WritingBusiness
SOC 2 Type II: partialISO 27001: not foundDPA: statedBAA: not foundZero retention: not found
1/7 assurancesChecked Oct 17, 2026
JetBrains AI Assistant
JetBrains · CodingBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
0/7 assurancesChecked Oct 17, 2026
Le Chat Enterprise
Mistral AI · AssistantBusiness
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: not found
4/7 assurancesChecked Oct 17, 2026
Loom AI
Atlassian (Loom) · VideoBusiness
SOC 2 Type II: partialISO 27001: not foundDPA: statedBAA: not foundZero retention: stated
3/7 assurancesChecked Oct 17, 2026
Microsoft 365 Copilot
Microsoft · AssistantBusiness
SOC 2 Type II: not foundISO 27001: statedDPA: statedBAA: statedZero retention: not found
5/7 assurancesChecked Oct 17, 2026
Microsoft Copilot (personal Microsoft account)
Microsoft · AssistantPersonal
SOC 2 Type II: not checked yetISO 27001: not checked yetDPA: not checked yetBAA: not checked yetZero retention: not checked yet
0/7 assurancesChecked Oct 17, 2026
Miro AI
Miro · CollaborationBusiness
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: not foundZero retention: stated
6/7 assurancesChecked Oct 17, 2026
monday AI
monday.com · ProductivityBusiness
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Notion AI
Notion · ProductivityBusiness
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: stated
6/7 assurancesChecked Oct 17, 2026
OpenAI API Platform
OpenAI · Model APIBusiness
SOC 2 Type II: statedISO 27001: not foundDPA: statedBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Otter.ai
Otter.ai · Meeting notesBusiness
SOC 2 Type II: statedISO 27001: vendor says noDPA: not foundBAA: statedZero retention: not found
2/7 assurancesChecked Oct 17, 2026
Perplexity (Free / Pro / Max)
Perplexity · SearchPersonal
SOC 2 Type II: not checked yetISO 27001: not checked yetDPA: not checked yetBAA: not checked yetZero retention: not checked yet
0/7 assurancesChecked Oct 17, 2026
Perplexity Enterprise Pro
Perplexity · SearchBusiness
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: not found
4/7 assurancesChecked Oct 17, 2026
Read AI
Read AI · Meeting notesBusiness
SOC 2 Type II: statedISO 27001: not foundDPA: statedBAA: statedZero retention: not found
3/7 assurancesChecked Oct 17, 2026
Replit (Teams / Enterprise)
Replit · CodingBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
0/7 assurancesChecked Oct 17, 2026
Salesforce Einstein / Agentforce
Salesforce · CRMBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: stated
1/7 assurancesChecked Oct 17, 2026
Slack AI
Salesforce (Slack) · CollaborationBusiness
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: stated
7/7 assurancesChecked Oct 17, 2026
Synthesia
Synthesia · VideoBusiness
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: not foundZero retention: not found
4/7 assurancesChecked Oct 17, 2026
Tabnine Enterprise
Tabnine · CodingBusiness
SOC 2 Type II: partialISO 27001: not foundDPA: not foundBAA: not foundZero retention: stated
2/7 assurancesChecked Oct 17, 2026
Vertex AI (Gemini on Google Cloud)
Google · Model APIBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: statedBAA: not foundZero retention: stated
3/7 assurancesChecked Oct 17, 2026
Webex AI Assistant
Cisco · Meeting notesBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
0/7 assurancesChecked Oct 17, 2026
Windsurf (Teams / Enterprise)
Cognition · CodingBusiness
SOC 2 Type II: statedISO 27001: not foundDPA: statedBAA: not foundZero retention: stated
3/7 assurancesChecked Oct 17, 2026
Writer
Writer · WritingBusiness
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: not foundZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Zapier AI
Zapier · AutomationBusiness
SOC 2 Type II: statedISO 27001: not foundDPA: statedBAA: not foundZero retention: stated
3/7 assurancesChecked Oct 17, 2026
Zendesk AI
Zendesk · SupportBusiness
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: stated
6/7 assurancesChecked Oct 17, 2026
Zoom AI Companion
Zoom · Meeting notesBusiness
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: statedZero retention: stated
2/7 assurancesChecked Oct 17, 2026
✓ stated on a vendor page~ partial / SOC 2 type not stated✕ vendor says no? not found on the vendor pages we checked. We never guess.– not checked yet (personal plans)
Not legal advice. These are plain-English summaries of vendors' public trust, privacy and terms pages for business and personal plans. They can be incomplete, out of date, or overridden by your contract. Verify with the vendor before you make a decision. How we collect this.