GitHub Copilot
GitHub · Coding agent · US · github.com/features/copilot
services/github-copilot.yamlVendor data-handling terms
“Starting on April 24, 2026, if you have a Copilot Free , Copilot Pro , Copilot Pro+ , or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models. / You can opt-out from allowing your data to be used for training in your personal settings for GitHub Copilot.”
“GitHub does not use Copilot Business or Copilot Enterprise customer data to train AI models. Copilot Business and Copilot Enterprise customers' data is protected under GitHub's Data Protection Agreement, which prohibits such use without customer authorization.”
The inline-suggestions documentation refers to the Copilot Trust Center for prompt and suggestion retention periods; that page is script-rendered and is not quoted here.
“We'll retain your Personal Data as long as your account is active and as needed to fulfill contractual obligations, comply with legal requirements, resolve disputes, and enforce agreements.”
“GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| copilot-proxy.githubusercontent.com | app | observed |
| githubcopilot.com | app | observed |
Assessment
Reasoning: The most widely deployed coding assistant. Since April 2026 individual plans train on inputs, outputs and code unless the user opts out, so a developer using a personal Copilot licence on company code exposes that code to training. Business and Enterprise seats are excluded by the DPA. The Copilot endpoints do not distinguish plan tiers on the wire.
Flags: Individual plans train by default since April 2026 · Personal licences on company code · Business and Enterprise excluded from training · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Training terms verified against the GitHub Copilot policy documentation; retention and transfer terms against the GitHub General Privacy Statement.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.