Does Grok Business / Enterprise & xAI API train on your data?
Doesn't train by default
Doesn't train on business data by default.
Enterprise terms cover Grok Business/Enterprise and the API. xAI may still create de-identified aggregated data unless you use ZDR. x.ai pages now name the operating company "SpaceXSI"; quotes keep that wording.
Why this matters: "De-identified" removes names, not the substance of what was said or written. What "de-identified" covers →
Below: retention, SOC 2, ISO 27001/42001, DPA, BAA, data residency and zero-retention for Grok Business / Enterprise & xAI API, each linked to xAI's own page.
Trains on your data by default
Enterprise terms cover Grok Business/Enterprise and the API. xAI may still create de-identified aggregated data unless you use ZDR. x.ai pages now name the operating company "SpaceXSI"; quotes keep that wording.
- x.ai/legal/terms-of-service-enterprise · checked Oct 18, 2026
“SpaceXSI will not use any User Content to train any foundation models, large language models, or other artificial intelligence systems or to develop any new products, services, or features, subject to disclosures to Customer and Customer-controlled user settings.”
- x.ai/legal/faq · checked Oct 18, 2026
“Similarly, we do not use content from our business and enterprise customers to improve our models.”
- x.ai/grok/business · checked Oct 18, 2026
“No training”
Data retention
Longer retention possible if agreed, legally required, or needed for safety/abuse investigation.
- x.ai/legal/terms-of-service-enterprise · checked Oct 18, 2026
“All User Content will be automatically and permanently deleted no later than 30 days after the end of the interaction or session in which it was submitted unless a different retention period is:”
- x.ai/grok/business · checked Oct 18, 2026
“Custom data retention”
ISO/IEC 27001
No ISO/IEC 27001 claim found on the x.ai pages checked (trust portal at trust.x.ai did not render).
ISO/IEC 42001
No ISO/IEC 42001 claim found on the x.ai pages checked.
DPA available
DPA is incorporated into the enterprise terms. It asks customers to send personal data only through the ZDR-enabled API.
- x.ai/legal/terms-of-service-enterprise · checked Oct 18, 2026
“SpaceXSI will process such data as a processor on Customer’s behalf, and SpaceXSI’s Data Processing Addendum located at”
BAA / HIPAA
PHI requires a signed BAA and use of the ZDR-enabled API.
- x.ai/legal/terms-of-service-enterprise · checked Oct 18, 2026
“unless Customer has first entered into a Business Associate Agreement or Amendment (“”
Data residency options
No customer region choice found. The DPA says data may be processed in the US and other countries.
- x.ai/legal/data-processing-addendum · checked Oct 18, 2026
“You acknowledge and agree that SpaceXSI may transfer and process Personal Data on a global basis outside Europe as necessary to provide the Services, including in the United States and other countries where SpaceXSI and its Subprocessors maintain data processing operations.”
Zero-retention option
ZDR-enabled API: content deleted within an hour of the request or on delivery, with no logs or backups.
- x.ai/legal/terms-of-service-enterprise · checked Oct 18, 2026
“when and to the extent Customer elects to use ZDR, User Content will exist in SpaceXSI systems only transiently and solely to the extent required to generate and return the real-time response;”
- x.ai/legal/data-processing-addendum · checked Oct 18, 2026
“Customer acknowledges and agrees that, when using ZDR, SpaceXSI will not retain any User Content (including Personal Data) after processing.”
Vendor pages we monitor for this tool
We save a fingerprint (SHA-256 of the page's visible text) on every check so we can spot when a vendor edits its terms.
| Page | Checked | Fingerprint |
|---|---|---|
| https://x.ai/legal/terms-of-service-enterprise | Oct 18, 2026 | 11389b389b50… |
| https://x.ai/legal/faq | Oct 18, 2026 | c0b9807b5bbb… |
| https://x.ai/grok/business | Oct 18, 2026 | 919501c95bd3… |
| https://x.ai/legal/data-processing-addendum | Oct 18, 2026 | f027b36cae93… |
Compare with
- Amazon Q Business Doesn't train
- ChatGPT Enterprise / Business Doesn't train
- Claude for Work (Team / Enterprise) Doesn't train
- Gemini for Google Workspace Doesn't train
- Le Chat Enterprise Doesn't train
- Microsoft 365 Copilot Doesn't train
See all Assistant tools · Why AI training on your data matters · How we source and verify this