· dev

GitHub vs GitLab

GitHub's policy answers the question and is graded F. GitLab's doesn't say either way. That's a finding about the document, not a worse grade.

Grades read the plan most people are on. Each company's full entry has every plan, every clause and the archived copy it was read from.

GitHub

GitHub uses your code, inputs and AI outputs to develop and train AI/ML models by default, with no self-serve opt-out stated in its privacy statement.

Verdict

By default: Trains on you by default
The way out: No opt-out in the policy
What F means: On by default, with no way out on the plan you are on — and nothing short of reading the terms would have told you.
Last checked: 5 Oct 2026

Read the full verdict →

GitLab

GitLab's AI terms mention training once: to forbid you from using GitLab Duo to train a competing model. Whether GitLab trains on your code isn't stated.

Verdict

By default: The policy does not say
The way out: Nothing to opt out of on the record
Last checked: 5 Oct 2026

Read the full verdict →

GitHub: every plan

GitHub · what each plan can refuse · checked 5 Oct 2026

2 PLANS

Plan

Exposure

Trains

Opt-out path

Retention

De-identified

Human review

Individual accounts (all plans)

86 / 100

YES

None offered

Not stated

Qualified

Unknown

How the score is made86 / 100 · the rubric

Default50 / 50

On by default, with no way out on this plan

Way out33 / 33

No route to refuse is stated

Paywall0 / 4

No paywall on the control

Scope0 / 4

One kind of data is in scope

Human review2 / 4

The policy does not say whether people read it

De-identified1 / 2

De-identification is promised with a qualifier

Organization-provided accounts (Enterprise/Business)

UNCLEAR

Not established, see below

Not stated

—

Not established

EVERY CELL ABOVE IS SOURCED FROM A QUOTED CLAUSE OR A DOCUMENTED SEARCH · SEE THE EVIDENCE ABOVE

EXPOSURE IS SCORED 0–100 ON ONE AXIS, HOW HARD IT IS TO STOP THIS PLAN TRAINING ON YOU. THE GRADE IS THE BAND IT FALLS IN: A 0–10 · B 11–25 · C 26–45 · D 46–60 · E 61–80 · F 81–100. HOW THE SCORE IS SET

Individual accounts (all plans)TRAINS: YES

OPT-OUT: None offered
RETENTION: Not stated
EXPOSURE: 86 / 100
DE-IDENTIFIED: Qualified
HUMAN REVIEW: Unknown

Organization-provided accounts (Enterprise/Business)UNCLEAR

OPT-OUT: Not established
RETENTION: Not stated
EXPOSURE: —
DE-IDENTIFIED: —
HUMAN REVIEW: Not established

GitLab: every plan

GitLab · what each plan can refuse · checked 5 Oct 2026

1 PLAN

Plan

Exposure

Trains

Opt-out path

Retention

De-identified

Human review

All plans (GitLab Duo / AI Functionality)

UNCLEAR

Not established, see below

Not stated

—

Not established

EVERY CELL ABOVE IS SOURCED FROM A QUOTED CLAUSE OR A DOCUMENTED SEARCH · SEE THE EVIDENCE ABOVE

All plans (GitLab Duo / AI Functionality)UNCLEAR

OPT-OUT: Not established
RETENTION: Not stated
EXPOSURE: —
DE-IDENTIFIED: —
HUMAN REVIEW: Not established

Every grade on this page is the one on the company's own entry, read from a dated, archived copy of its policy. Nothing here is computed separately. How grades are set · All comparisons