Last checked:
Comparisons › GitHub Copilot vs ChatGPT
GitHub Copilot vs ChatGPT: privacy for business
GitHub Copilot: Best-graded plan: GitHub Copilot Business / Enterprise (A). GitHub Copilot Business / Enterprise does not train on your data by default. GitHub Copilot Free / Pro / Pro+ can use your data for training unless you opt out.
ChatGPT: Best-graded plan: ChatGPT Business (A). ChatGPT Business, ChatGPT Enterprise do not train on your data by default. ChatGPT Free, ChatGPT Plus can use your data for training unless you opt out.
ChatGPT: Best-graded plan: ChatGPT Business (A). ChatGPT Business, ChatGPT Enterprise do not train on your data by default. ChatGPT Free, ChatGPT Plus can use your data for training unless you opt out.
GitHub Copilot
| Plan | Grade | Trains by default | Human review | Retention | DPA | SOC 2 |
|---|---|---|---|---|---|---|
| Free / Pro / Pro+ | C | yes since Apr 24, 2026 (opt-out available) | unknown | unknown | no (DPA protection is for Business/Enterprise) | unknown |
| Business / Enterprise | A | no | unknown | IDE chat and code completions: prompts and suggestions not retained; other Copilot access (github.com, mobile, CLI): 28 days; engagement data 2 years | yes (GitHub Data Protection Agreement) | yes (SOC 2 Type II; Copilot Business and Enterprise in scope) |
Sources: Free / Pro / Pro+ · Business / Enterprise
Is GitHub Copilot safe for business? · Full GitHub Copilot breakdown
ChatGPT
| Plan | Grade | Trains by default | Human review | Retention | DPA | SOC 2 |
|---|---|---|---|---|---|---|
| Free | C | yes (opt-out available) | unknown | Temporary Chats up to 30 days; regular chats until you delete them, then removed within 30 days (unless already de-identified) | not listed (OpenAI's DPA covers Business, Enterprise, API) | not listed (OpenAI's SOC 2 Type 2 covers the API, ChatGPT Business/Team, Enterprise and Edu) |
| Plus | C | yes (opt-out available) | unknown | Temporary Chats up to 30 days; regular chats until you delete them, then removed within 30 days (unless already de-identified) | not listed (OpenAI's DPA covers Business, Enterprise, API) | not listed (OpenAI's SOC 2 Type 2 covers the API, ChatGPT Business/Team, Enterprise and Edu) |
| Business | A | no | Limited: authorized staff and contractors for support/abuse | Admin-controlled; deleted chats removed within 30 days | yes | yes (Type 2) |
| Enterprise | A | no | Only for incidents, recovery with permission, or legal requirement | Admin-controlled; deleted chats removed within 30 days | yes | yes (Type 2) |
Sources: Free · Plus · Business · Enterprise
Is ChatGPT safe for business? · Full ChatGPT breakdown
The plan matters more than the brand: compare business plan to business plan. How we grade.