GitHub Copilot Business and Enterprise
GitHub
Safe
GitHub says it does not use Copilot Business or Copilot Enterprise data to train its models, and the 2026 individual-plan training change does not apply to those plans. Customers can enter a data protection agreement for GDPR-style laws. That is a reasonable default for private code. A HIPAA business associate agreement is not stated on the pages we read.
Last checked 2026-11-10
Data-safety checklist
Trains on your data by default
No
The Copilot Business page says GitHub does not use Copilot Business or Enterprise data to train its models. The March 2026 policy update says those plans are not affected.How to opt out
Steps
No opt-out is required for training. It is already excluded.Data retention
What they keep
Unknown. The pages we read do not state how long prompts are stored.BAA / HIPAA
Unknown
GitHub says customers can enter a data protection agreement for GDPR and similar laws. HIPAA is not mentioned on the pages we read.Certifications
1 listed
- Unknown
Enterprise and admin controls
Controls
Business and Enterprise are organization products. The pages we read do not spell out each admin switch. They do say organization-owned repositories and these plans are outside the individual training program.Sources
2 pages