Does your AI tool train on your company data?
A searchable tracker of the data terms behind 53 common work AI tools: whether they train on your business data, how long they keep it, and which assurances they offer. Every answer links to the vendor's own page. 57% of fields confirmed from vendor pages · last checked Oct 17, 2026.
35Don't train by default
7Train by default
2Depends on plan
9Not stated by vendor
Why this matters
Using a tool and letting its vendor train on your data are different decisions.
Read the full explanation, with sources →- Training is hard to undoOnce your data trains a model, you can't pull it back out. Opting out later only stops future use.
- Models can memorize and repeat what they were trained onResearch shows AI models can reproduce pieces of their training data word for word, including contact details and code.
- It can conflict with your contracts and regulationsCustomer NDAs and DPAs, GDPR, HIPAA and professional confidentiality rules can limit how data may be used.
- What "de-identified" does and doesn't protect"De-identified" removes names, not the substance. Your strategy, numbers and code stay in.
Category
Must have
53 of 53 tools
Adobe Firefly
Adobe · Design
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
0/7 assurancesChecked Oct 17, 2026
Airtable AI
Airtable · Productivity
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: stated
6/7 assurancesChecked Oct 17, 2026
Amazon Bedrock
AWS · Model API
SOC 2 Type II: partialISO 27001: statedDPA: not foundBAA: statedZero retention: not found
2/7 assurancesChecked Oct 17, 2026
Amazon Q Business
AWS · Assistant
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: statedZero retention: not found
1/7 assurancesChecked Oct 17, 2026
Asana AI
Asana · Productivity
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Atlassian Rovo / Atlassian Intelligence
Atlassian · Productivity
SOC 2 Type II: partialISO 27001: statedDPA: statedBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Azure OpenAI in Foundry Models
Microsoft · Model API
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
1/7 assurancesChecked Oct 17, 2026
Box AI
Box · Content
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: stated
2/7 assurancesChecked Oct 17, 2026
Canva AI (Magic Studio)
Canva · Design
SOC 2 Type II: not foundISO 27001: not foundDPA: statedBAA: not foundZero retention: not found
1/7 assurancesChecked Oct 17, 2026
ChatGPT Enterprise / Business
OpenAI · Assistant
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: not found
6/7 assurancesChecked Oct 17, 2026
Claude API
Anthropic · Model API
SOC 2 Type II: not foundISO 27001: not foundDPA: statedBAA: statedZero retention: stated
3/7 assurancesChecked Oct 17, 2026
Claude for Work (Team / Enterprise)
Anthropic · Assistant
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: not found
5/7 assurancesChecked Oct 17, 2026
ClickUp Brain
ClickUp · Productivity
SOC 2 Type II: partialISO 27001: statedDPA: statedBAA: statedZero retention: stated
6/7 assurancesChecked Oct 17, 2026
Copy.ai
Copy.ai · Writing
SOC 2 Type II: partialISO 27001: not foundDPA: not foundBAA: not foundZero retention: stated
1/7 assurancesChecked Oct 17, 2026
Cursor (Teams / Enterprise)
Anysphere · Coding
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: not foundZero retention: stated
4/7 assurancesChecked Oct 17, 2026
DeepL Pro
DeepL · Writing
SOC 2 Type II: statedISO 27001: not foundDPA: not foundBAA: not foundZero retention: stated
2/7 assurancesChecked Oct 17, 2026
Dropbox Dash / Dropbox AI
Dropbox · Content
SOC 2 Type II: partialISO 27001: statedDPA: not foundBAA: statedZero retention: not found
2/7 assurancesChecked Oct 17, 2026
ElevenLabs
ElevenLabs · Voice
SOC 2 Type II: partialISO 27001: statedDPA: not foundBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Fathom
Fathom · Meeting notes
SOC 2 Type II: statedISO 27001: vendor says noDPA: statedBAA: statedZero retention: not found
3/7 assurancesChecked Oct 17, 2026
Figma AI
Figma · Design
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: not foundZero retention: not found
3/7 assurancesChecked Oct 17, 2026
Fireflies.ai
Fireflies.ai · Meeting notes
SOC 2 Type II: statedISO 27001: not foundDPA: statedBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Gamma
Gamma · Design
SOC 2 Type II: partialISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
0/7 assurancesChecked Oct 17, 2026
Gemini for Google Workspace
Google · Assistant
SOC 2 Type II: partialISO 27001: statedDPA: statedBAA: statedZero retention: not found
5/7 assurancesChecked Oct 17, 2026
GitHub Copilot Business / Enterprise
GitHub (Microsoft) · Coding
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: not foundZero retention: stated
4/7 assurancesChecked Oct 17, 2026
Glean
Glean · Search
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: statedZero retention: not found
4/7 assurancesChecked Oct 17, 2026
Gong
Gong · Revenue intelligence
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: vendor says noZero retention: not found
4/7 assurancesChecked Oct 17, 2026
Grammarly Business / Enterprise
Grammarly (Superhuman) · Writing
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: statedZero retention: not found
4/7 assurancesChecked Oct 17, 2026
HubSpot AI (Breeze)
HubSpot · CRM
SOC 2 Type II: not foundISO 27001: not foundDPA: statedBAA: not foundZero retention: partial
1/7 assurancesChecked Oct 17, 2026
Intercom Fin
Intercom · Support
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: statedZero retention: stated
6/7 assurancesChecked Oct 17, 2026
Jasper
Jasper AI · Writing
SOC 2 Type II: partialISO 27001: not foundDPA: statedBAA: not foundZero retention: not found
1/7 assurancesChecked Oct 17, 2026
JetBrains AI Assistant
JetBrains · Coding
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
0/7 assurancesChecked Oct 17, 2026
Le Chat Enterprise
Mistral AI · Assistant
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: not found
4/7 assurancesChecked Oct 17, 2026
Loom AI
Atlassian (Loom) · Video
SOC 2 Type II: partialISO 27001: not foundDPA: statedBAA: not foundZero retention: stated
3/7 assurancesChecked Oct 17, 2026
Microsoft 365 Copilot
Microsoft · Assistant
SOC 2 Type II: not foundISO 27001: statedDPA: statedBAA: statedZero retention: not found
5/7 assurancesChecked Oct 17, 2026
Miro AI
Miro · Collaboration
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: not foundZero retention: stated
6/7 assurancesChecked Oct 17, 2026
monday AI
monday.com · Productivity
SOC 2 Type II: statedISO 27001: statedDPA: not foundBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Notion AI
Notion · Productivity
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: stated
6/7 assurancesChecked Oct 17, 2026
OpenAI API Platform
OpenAI · Model API
SOC 2 Type II: statedISO 27001: not foundDPA: statedBAA: statedZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Otter.ai
Otter.ai · Meeting notes
SOC 2 Type II: statedISO 27001: vendor says noDPA: not foundBAA: statedZero retention: not found
2/7 assurancesChecked Oct 17, 2026
Perplexity Enterprise Pro
Perplexity · Search
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: not found
4/7 assurancesChecked Oct 17, 2026
Read AI
Read AI · Meeting notes
SOC 2 Type II: statedISO 27001: not foundDPA: statedBAA: statedZero retention: not found
3/7 assurancesChecked Oct 17, 2026
Replit (Teams / Enterprise)
Replit · Coding
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
0/7 assurancesChecked Oct 17, 2026
Salesforce Einstein / Agentforce
Salesforce · CRM
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: stated
1/7 assurancesChecked Oct 17, 2026
Slack AI
Salesforce (Slack) · Collaboration
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: stated
7/7 assurancesChecked Oct 17, 2026
Synthesia
Synthesia · Video
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: not foundZero retention: not found
4/7 assurancesChecked Oct 17, 2026
Tabnine Enterprise
Tabnine · Coding
SOC 2 Type II: partialISO 27001: not foundDPA: not foundBAA: not foundZero retention: stated
2/7 assurancesChecked Oct 17, 2026
Vertex AI (Gemini on Google Cloud)
Google · Model API
SOC 2 Type II: not foundISO 27001: not foundDPA: statedBAA: not foundZero retention: stated
3/7 assurancesChecked Oct 17, 2026
Webex AI Assistant
Cisco · Meeting notes
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: not foundZero retention: not found
0/7 assurancesChecked Oct 17, 2026
Windsurf (Teams / Enterprise)
Cognition · Coding
SOC 2 Type II: statedISO 27001: not foundDPA: statedBAA: not foundZero retention: stated
3/7 assurancesChecked Oct 17, 2026
Writer
Writer · Writing
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: not foundZero retention: stated
5/7 assurancesChecked Oct 17, 2026
Zapier AI
Zapier · Automation
SOC 2 Type II: statedISO 27001: not foundDPA: statedBAA: not foundZero retention: stated
3/7 assurancesChecked Oct 17, 2026
Zendesk AI
Zendesk · Support
SOC 2 Type II: statedISO 27001: statedDPA: statedBAA: statedZero retention: stated
6/7 assurancesChecked Oct 17, 2026
Zoom AI Companion
Zoom · Meeting notes
SOC 2 Type II: not foundISO 27001: not foundDPA: not foundBAA: statedZero retention: stated
2/7 assurancesChecked Oct 17, 2026
✓ stated on a vendor page~ partial / SOC 2 type not stated✕ vendor says no? not found on the vendor pages we checked. We never guess.
Not legal advice. These are plain-English summaries of vendors' public trust, privacy and terms pages for business plans. They can be incomplete, out of date, or overridden by your contract. Verify with the vendor before you make a decision. How we collect this.