🍑#FTFNew

AI Tool Data Retention Lookup

Know before your client clicks "Accept." A free, no-login reference of how 25+ popular AI tools handle data retention, model training, and compliance — built for MSPs managing SMB clients in healthcare, legal, and financial verticals.

AI GovernanceData RetentionHIPAAMSP ToolsComplianceVendor LookupFree Tools Friday
21+ Tools

Major chat, meeting, code, and CRM AI products

Vertical Risk

Healthcare, legal, financial, and general lenses

CSV Export

MIT-licensed dataset for client conversations

No Login

Zero email gate — use it in the field

This tool aggregates publicly available vendor documentation (privacy policies, trust centers, DPAs, and help docs) verified as of July 2026. AI vendor policies change frequently — several changed materially in 2025–2026. Always confirm current terms directly with the vendor and, for regulated data, obtain a signed Business Associate Agreement (BAA) or Data Processing Agreement (DPA) before processing PHI, privileged, or financial data. This is decision-support information, not legal advice. Verify the linked source before making a compliance decision. Risk tiers reflect Peach Security's methodology and your client's vertical, not a certification.

Data as of July 2026. Vendor policies change frequently — verify linked sources before client decisions.

Consumer vs. enterprise

Same vendor, different risk profile — this is the #1 MSP compliance gotcha.

Client vertical

Showing 21 of 21 tools · MIT licensed export · No login required

Adobe Firefly / Acrobat AI Assistant

Business / Enterprise

Medium
TrainsNo
Retention~12 hours
BAANo
SOC 2Conditional
EU residencyUnclear

Canva AI (Magic Studio)

Free / Pro

High
TrainsYes by default (opt-out)
RetentionNot published
BAANo
SOC 2Yes
EU residencyConditional

ChatGPT

Free / Plus / Pro

High
TrainsYes by default (opt-out)
RetentionUntil deleted
BAANo
SOC 2No
EU residencyNo

Claude

Free / Pro / Max

High
Changed
TrainsYes by default (opt-out)
RetentionUntil deleted
BAANo
SOC 2Conditional
EU residencyNo

Cursor

Individual

Medium
TrainsConditional
Retention~30 days
BAANo
SOC 2Yes
EU residencyUnclear

Fireflies.ai

Business

High
TrainsNo
RetentionUntil deleted
BAAConditional
SOC 2Yes
EU residencyConditional

GitHub Copilot

Free / Pro / Pro+ / Max

High
Changed
TrainsYes by default (opt-out)
Retention~30 days
BAANo
SOC 2Yes
EU residencyUnclear

Google Gemini

Consumer (gemini.google.com)

High
TrainsYes by default (opt-out)
RetentionUntil deleted
BAANo
SOC 2No
EU residencyNo

Google NotebookLM

Consumer / Workspace

Medium
TrainsNo
RetentionUntil deleted
BAANo
SOC 2No
EU residencyNo

Grammarly

Business

Medium
TrainsNo
RetentionZero
BAAConditional
SOC 2Yes
EU residencyNo

Grok (xAI)

Consumer (grok.com / X app)

High
TrainsYes by default (opt-out)
Retention~30 days
BAANo
SOC 2Yes
EU residencyUnclear

HubSpot AI (Breeze)

Business / Enterprise

Medium
TrainsNo
RetentionZero
BAAConditional
SOC 2Yes
EU residencyYes

Jasper AI

Business

Medium
TrainsNo
RetentionUntil deleted
BAANo
SOC 2Yes
EU residencyUnclear

Microsoft Copilot

Free (consumer)

High
TrainsYes by default (opt-out)
RetentionUntil deleted
BAANo
SOC 2Conditional
EU residencyNo

Microsoft Teams Premium + Copilot

Teams Premium + M365 Copilot

Low
TrainsNo
RetentionConfigurable
BAAYes
SOC 2Yes
EU residencyYes

monday.com AI

Business

Medium
TrainsNo
Retention~30 days
BAAConditional
SOC 2Yes
EU residencyYes

Notion AI

Business / Plus

Medium
TrainsNo
Retention~30 days
BAAConditional
SOC 2Yes
EU residencyUnclear

Otter.ai

Business / Enterprise

High
Litigation
TrainsConditional
RetentionConfigurable
BAAConditional
SOC 2Yes
EU residencyUnclear

Perplexity AI

Free / Pro / Max

High
TrainsYes by default (opt-out)
RetentionUntil deleted
BAANo
SOC 2Yes
EU residencyUnclear

Salesforce Einstein (Agentforce)

Enterprise (Trust Layer)

Low
TrainsNo
RetentionZero
BAAYes
SOC 2Yes
EU residencyYes

Zoom AI Companion

Business / Enterprise

High
TrainsNo
RetentionConfigurable
BAAConditional
SOC 2Yes
EU residencyConditional

How to Use This Lookup

  1. Start with the tier lens — flip between consumer and enterprise to see how the same vendor changes risk profile.
  2. Set the client vertical — defaults to General; switch to Healthcare for the strictest lens (no BAA = high risk).
  3. Filter and sort — narrow to tools that train by default, lack a BAA, or match your client's compliance requirements.
  4. Expand a row — read why the risk tier was assigned, the policy quote, MSP caveat, and linked vendor sources.
  5. Copy or export — generate a client summary blurb or download the MIT-licensed CSV/JSON for your records.

Perfect For

Shadow IT triage

Client asks “can we use ChatGPT?” — answer depends on which tier they clicked.

Healthcare MSP assessments

Instantly flag tools without a BAA or that train on meeting audio containing PHI.

Vendor renewal conversations

Show the consumer-vs-enterprise split before a client renews the wrong SKU.

QBR compliance documentation

Export sourced data for audit trails and client-facing risk summaries.

Want to influence what we build next?

Visit the Voting Board

Get More Free Tools Every Friday

Join MSPs getting free security tools, scripts, and resources delivered weekly.