GitHub Copilot vs. Ollama: data protection per plan
GitHub Copilot (7 plans) and Ollama (5 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.
Last updated: (latest review date of the tools shown)
At a glance
Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.
All plans: each value is listed with the plans it applies to.
| Feature | GitHub Copilot | Ollama |
|---|---|---|
| Provider based in | According to the GitHub General Privacy Statement | Ollama Inc. |
| Plans recorded | 7 | 5 |
| Hosting | mixed: Free, Student, Pro, Pro+, MaxEU option: Business, Enterprise | mixed: all 5 plans |
| Training on inputs | opt-out available: Free, Pro, Pro+, Maxnot documented: Studentno: Business, Enterprise | no: all 5 plans |
| DPA | not documented: Free, Student, Pro, Pro+, Maxyes: Business, Enterprise | not documented: all 5 plans |
| As of | 18 Oct 2026 | 18 Oct 2026 |
Plans compared
Comparing: GitHub Copilot Business vs. Ollama Team
| Feature | GitHub CopilotBusiness | OllamaTeam (Early Access) |
|---|---|---|
| differs by plan | yes | not publicly documented |
| Details: DPA available | yes: Copilot is covered by the GitHub Data Protection Agreement, which applies to all generally available (GA) Copilot features and the previews listed in 'GitHub DPA-Covered Previews' (q8); GitHub and customers 'can enter a Data Protection Agreement that supports compliance with the GDPR' (q1). For purchases directly from GitHub, the GitHub Generative AI Services Terms apply; for purchases via Microsoft, the Microsoft Product Terms apply (q8). Provider’s DPA | not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller) |
| no | no | |
| Details: Training on inputs | "No. GitHub does not use either Copilot Business or Enterprise data to train its models." (q1); q3: "GitHub does not use Copilot Business or Copilot Enterprise customer data to train AI models." Third-party models: according to q3, OpenAI, among others, "do not train models on customer business data", Google/Gemini does not use prompts for training, zero data retention agreements with OpenAI, Anthropic, xAI and Fireworks AI (details per provider in q3). q14: "Copilot Business and Copilot Enterprise customers' data is protected under GitHub's Data Protection Agreement, which prohibits such use without customer authorization." | Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses. |
| differs by plan | EU option | mixed |
| Details: Data residency | Default on github.com: storage in the USA (q7). EU data residency via GitHub Enterprise Cloud with GHE.com: Copilot Business or Enterprise can be assigned there (q7). With the policy 'Restrict Copilot to data residency compliant models', according to q6, 'all inference processing and associated data' remain in the selected region (EU or USA); policy disabled by default, additional consumption +10 % AI Credits (q6). Without this policy, according to q5, Copilot data and logs are 'by default stored outside your region'. Inline suggestions: models hosted on Azure (q3). | Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device. |
| list available | list available | |
| Details: List published |
|
|
| differs by plan | Default settings according to q1: access… | Privacy Policy |
| Details: Data retention | Default settings according to q1: access via IDE (chat and code completions): prompts and suggestions "Not retained"; User Engagement Data two years; Feedback Data "as long as needed for its intended purpose". All other access routes (including github.com, Mobile, CLI): prompts and suggestions 28 days; User Engagement Data two years. DPA (October 2025 version), Section 8: after the end of the services, GitHub deletes the Customer Personal Data or returns it at the customer's choice and deletes existing copies "in accordance with our retention and deletion policy" (q13). Unlike q1, the Copilot Trust Center FAQ (q16) assigns Copilot CLI to IDE access: inputs and outputs "Not retained by default" (exception: time-limited retention in the event of confirmed violations of the Acceptable Use Policies or Terms of Service); other access: "Retained for up to 28 days by default". | Privacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented. |
| differs by plan | 19 USD/user/mo | from 500 USD/mo |
| Details: Price | 19 USD per assigned seat/month (q2) | from 500 USD per month (pricing page); usage beyond the included credits is billed from a shared team balance as you go. According to the FAQ, Ollama creates a separate team account on joining. The customer is responsible for taxes (Terms). |
| yes | yes | |
| Details: AI features included | yes (1,900 AI Credits per user/month, access to premium models; q2) | yes (Pro plus unlimited users, 1,000 USD of usage credits per month shared across the team, centralised billing and administration, priority support, 10 concurrent requests; shared projects "coming soon" according to the pricing page) |
| 11 sources | 4 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by plan
- GitHub Copilot Businessyes
- Ollama Teamnot publicly documented
- GitHub Copilot Business
yes: Copilot is covered by the GitHub Data Protection Agreement, which applies to all generally available (GA) Copilot features and the previews listed in 'GitHub DPA-Covered Previews' (q8); GitHub and customers 'can enter a Data Protection Agreement that supports compliance with the GDPR' (q1). For purchases directly from GitHub, the GitHub Generative AI Services Terms apply; for purchases via Microsoft, the Microsoft Product Terms apply (q8).
Provider’s DPAOllama Teamnot publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
Training
- GitHub Copilot Businessno
- Ollama Teamno
- GitHub Copilot Business
"No. GitHub does not use either Copilot Business or Enterprise data to train its models." (q1); q3: "GitHub does not use Copilot Business or Copilot Enterprise customer data to train AI models." Third-party models: according to q3, OpenAI, among others, "do not train models on customer business data", Google/Gemini does not use prompts for training, zero data retention agreements with OpenAI, Anthropic, xAI and Fireworks AI (details per provider in q3). q14: "Copilot Business and Copilot Enterprise customers' data is protected under GitHub's Data Protection Agreement, which prohibits such use without customer authorization."
Ollama TeamPricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
Hosting
- differs by plan
- GitHub Copilot BusinessEU option
- Ollama Teammixed
- GitHub Copilot Business
Default on github.com: storage in the USA (q7). EU data residency via GitHub Enterprise Cloud with GHE.com: Copilot Business or Enterprise can be assigned there (q7). With the policy 'Restrict Copilot to data residency compliant models', according to q6, 'all inference processing and associated data' remain in the selected region (EU or USA); policy disabled by default, additional consumption +10 % AI Credits (q6). Without this policy, according to q5, Copilot data and logs are 'by default stored outside your region'. Inline suggestions: models hosted on Azure (q3).
Ollama TeamPricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
Sub-processors
- GitHub Copilot Businesslist available
- Ollama Teamlist available
- GitHub Copilot Business
- Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
- GitHub subsidiaries as per the list: GitHub Australia Pty Ltd, GitHub BV (NL), GitHub Canada ULC, GitHub Germany GmbH, GitHub India Pty Ltd, npm Inc, Semmle Inc
Ollama Team- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
Retention
- differs by plan
- GitHub Copilot BusinessDefault settings according to q1: access…
- Ollama TeamPrivacy Policy
- GitHub Copilot BusinessDefault settings according to q1: access via IDE (chat and code completions): prompts and suggestions "Not retained"; User Engagement Data two years; Feedback Data "as long as needed for its intended purpose". All other access routes (including github.com, Mobile, CLI): prompts and suggestions 28 days; User Engagement Data two years. DPA (October 2025 version), Section 8: after the end of the services, GitHub deletes the Customer Personal Data or returns it at the customer's choice and deletes existing copies "in accordance with our retention and deletion policy" (q13). Unlike q1, the Copilot Trust Center FAQ (q16) assigns Copilot CLI to IDE access: inputs and outputs "Not retained by default" (exception: time-limited retention in the event of confirmed violations of the Acceptable Use Policies or Terms of Service); other access: "Retained for up to 28 days by default".Ollama TeamPrivacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.
Price
- differs by plan
- GitHub Copilot Business19 USD/user/mo
- Ollama Teamfrom 500 USD/mo
- GitHub Copilot Business
19 USD per assigned seat/month (q2)
Ollama Teamfrom 500 USD per month (pricing page); usage beyond the included credits is billed from a shared team balance as you go. According to the FAQ, Ollama creates a separate team account on joining. The customer is responsible for taxes (Terms).
- GitHub Copilot Businessyes
- Ollama Teamyes
- GitHub Copilot Business
yes (1,900 AI Credits per user/month, access to premium models; q2)
Ollama Teamyes (Pro plus unlimited users, 1,000 USD of usage credits per month shared across the team, centralised billing and administration, priority support, 10 concurrent requests; shared projects "coming soon" according to the pricing page)
Evidence
- GitHub Copilot Business11 sources
- Ollama Team4 sources
- GitHub Copilot Business
- GitHub Copilot: Plans & pricing incl. FAQ (Privacy, Retention, Training)Pricing page / provider FAQ, retrieved 18 Oct 2026
- Plans for GitHub Copilot (GitHub Docs)Official documentation, retrieved 14 Oct 2026
- Hosting of models for GitHub Copilot (GitHub Docs)Official documentation, retrieved 18 Oct 2026
- GitHub SubprocessorsSub-processor list, retrieved 14 Oct 2026
- About storage of your data with data residency (GHE.com)Official documentation, retrieved 14 Oct 2026
- GitHub Copilot with data residencyOfficial documentation, retrieved 14 Oct 2026
- About GitHub Enterprise Cloud with data residencyOfficial documentation, retrieved 14 Oct 2026
- Resources for getting approval of GitHub CopilotOfficial documentation, retrieved 14 Oct 2026
- GitHub Data Protection Agreement (DPA), version October 2025DPA, retrieved 14 Oct 2026
- Managing GitHub Copilot policies as an individual subscriber (GitHub Docs)Documentation, retrieved 18 Oct 2026
- GitHub Copilot Trust Center: FAQ (Privacy, Security, Commercial)Trust Center / provider FAQ, retrieved 18 Oct 2026
Ollama Team- PricingPricing page, retrieved 18 Oct 2026
- Terms of Service (Last updated: May 2026)Terms and conditions, retrieved 18 Oct 2026
- Privacy Policy (Last updated: March 2026)Privacy notice, retrieved 18 Oct 2026
- Docs: CloudDocumentation, retrieved 18 Oct 2026
| Feature | GitHub Copilot | Ollama |
|---|---|---|
| differs by tool |
| not publicly documentedall 5 plans |
| Details: DPA available |
|
|
| differs by tool |
| noall 5 plans |
| Details: Training on inputs |
|
|
| differs by tool |
| mixedall 5 plans |
| Details: Data residency |
|
|
| list availableall 7 plans | list availableall 5 plans | |
| Details: List published |
|
|
| differs by tool |
| Privacy Policyall 5 plans |
| Details: Data retention |
|
|
| differs by tool |
|
|
| Details: Price |
|
|
| yesall 7 plans | yesall 5 plans | |
| Details: AI features included |
|
|
| 13 sources | 4 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- differs by tool
- GitHub Copilot
- not publicly documentedFree, Student, Pro, Pro+, Max
- yesBusiness, Enterprise
- Ollamanot publicly documentedall 5 plans
- GitHub Copilot
- Free
not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise
- Student
not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise
- Pro
not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise
- Pro+
not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise
- Max
not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise
- Business
yes: Copilot is covered by the GitHub Data Protection Agreement, which applies to all generally available (GA) Copilot features and the previews listed in 'GitHub DPA-Covered Previews' (q8); GitHub and customers 'can enter a Data Protection Agreement that supports compliance with the GDPR' (q1). For purchases directly from GitHub, the GitHub Generative AI Services Terms apply; for purchases via Microsoft, the Microsoft Product Terms apply (q8).
Provider’s DPA - Enterprise
yes: as Business (GitHub Data Protection Agreement for GA features and listed DPA previews; q8, q1).
Provider’s DPA
Ollama- Free
not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
- Pro
not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
- Max
not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
- Team (Early Access)
not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
- Enterprise
not publicly documented (no DPA on the retrieved pages; the Privacy Policy names Ollama Inc. as controller)
- Free
Training
- differs by tool
- GitHub Copilot
- opt-out availableFree, Pro, Pro+, Max
- not publicly documentedStudent
- noBusiness, Enterprise
- Ollamanoall 5 plans
- GitHub Copilot
- Free
GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings".
- Student
q1, q3 and q14 expressly state the training rule for Copilot Free, Pro, Pro+ and Max (q14: "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan ..."). Copilot Student is not mentioned in these sentences; the retrieved primary sources contain no separate statement on Student. The Copilot Trust Center FAQ (q16) likewise states the training rule only for "Individual (Free/Pro/Pro+/Max) Subscribers"; the documentation page on Copilot Student (q17) contains no statement on training.
- Pro
GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings".
- Pro+
GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings".
- Max
GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings".
- Business
"No. GitHub does not use either Copilot Business or Enterprise data to train its models." (q1); q3: "GitHub does not use Copilot Business or Copilot Enterprise customer data to train AI models." Third-party models: according to q3, OpenAI, among others, "do not train models on customer business data", Google/Gemini does not use prompts for training, zero data retention agreements with OpenAI, Anthropic, xAI and Fireworks AI (details per provider in q3). q14: "Copilot Business and Copilot Enterprise customers' data is protected under GitHub's Data Protection Agreement, which prohibits such use without customer authorization."
- Enterprise
"GitHub does not use either Copilot Business or Enterprise data to train its models." (q1, q3). q14: "Copilot Business and Copilot Enterprise customers' data is protected under GitHub's Data Protection Agreement, which prohibits such use without customer authorization."
Ollama- Free
Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
- Pro
Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
- Max
Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
- Team (Early Access)
Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
- Enterprise
Pricing page (FAQ Privacy): "Prompt or response data is never logged or trained on." Terms (May 2026, section 5): Ollama does not use inputs or outputs to train AI models. Privacy Policy (March 2026): no use of inputs or outputs for training; prompt or response content is not requested in support requests. According to the pricing page, Ollama requires no-logging, no-training and zero-data-retention policies from hosting partners. Local use: according to the Privacy Policy, Ollama has no access to prompts and responses.
- Free
Hosting
- differs by tool
- GitHub Copilot
- mixedFree, Student, Pro, Pro+, Max
- EU optionBusiness, Enterprise
- Ollamamixedall 5 plans
- GitHub Copilot
- Free
GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI.
- Student
GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI.
- Pro
GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI.
- Pro+
GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI.
- Max
GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI.
- Business
Default on github.com: storage in the USA (q7). EU data residency via GitHub Enterprise Cloud with GHE.com: Copilot Business or Enterprise can be assigned there (q7). With the policy 'Restrict Copilot to data residency compliant models', according to q6, 'all inference processing and associated data' remain in the selected region (EU or USA); policy disabled by default, additional consumption +10 % AI Credits (q6). Without this policy, according to q5, Copilot data and logs are 'by default stored outside your region'. Inline suggestions: models hosted on Azure (q3).
- Enterprise
As Business: default USA (q7); EU data residency via GHE.com with the policy 'Restrict Copilot to data residency compliant models' (q6, q5). q6 lists models of the GPT and Claude series for the EU; according to q6, model availability per region changes continuously. Not all Copilot features are available on GHE.com (q7).
Ollama- Free
Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
- Pro
Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
- Max
Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
- Team (Early Access)
Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
- Enterprise
Pricing page (FAQ Privacy): Ollama hosts models and compute resources primarily in the United States; to serve global demand, traffic may be routed to Europe ("may route to Europe for additional capacity"). A selectable EU region is not documented. Privacy Policy: data may be transferred to and processed in the United States. Local models run on the user's own device.
- Free
Sub-processors
- GitHub Copilotlist availableall 7 plans
- Ollamalist availableall 5 plans
- GitHub Copilot
- Free
- According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11).
- Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
- Student
- According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11).
- Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
- Pro
- According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11).
- Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
- Pro+
- According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11).
- Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
- Max
- According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11).
- Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
- Business
- Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
- GitHub subsidiaries as per the list: GitHub Australia Pty Ltd, GitHub BV (NL), GitHub Canada ULC, GitHub Germany GmbH, GitHub India Pty Ltd, npm Inc, Semmle Inc
- Enterprise
- Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
- GitHub subsidiaries as per the list: GitHub Australia Pty Ltd, GitHub BV (NL), GitHub Canada ULC, GitHub Germany GmbH, GitHub India Pty Ltd, npm Inc, Semmle Inc
Ollama- Free
- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
- Pro
- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
- Max
- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
- Team (Early Access)
- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
- Enterprise
- NVIDIA Cloud Providers (NCPs) for hosting open models, without names or locations (pricing page)
- Stripe (payment processing, according to the Terms and Privacy Policy)
- Cloud infrastructure and model inference providers according to the Privacy Policy, without names
- Sub-processor list: not publicly documented
- Free
Retention
- differs by tool
- GitHub Copilot
- not publicly documentedFree, Student, Pro, Pro+, Max
- Default settings according to q1: access…Business, Enterprise
- OllamaPrivacy Policyall 5 plans
- GitHub Copilot
- Freenot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary".
- Studentnot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary".
- Pronot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary".
- Pro+not publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary".
- Maxnot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary".
- BusinessDefault settings according to q1: access via IDE (chat and code completions): prompts and suggestions "Not retained"; User Engagement Data two years; Feedback Data "as long as needed for its intended purpose". All other access routes (including github.com, Mobile, CLI): prompts and suggestions 28 days; User Engagement Data two years. DPA (October 2025 version), Section 8: after the end of the services, GitHub deletes the Customer Personal Data or returns it at the customer's choice and deletes existing copies "in accordance with our retention and deletion policy" (q13). Unlike q1, the Copilot Trust Center FAQ (q16) assigns Copilot CLI to IDE access: inputs and outputs "Not retained by default" (exception: time-limited retention in the event of confirmed violations of the Acceptable Use Policies or Terms of Service); other access: "Retained for up to 28 days by default".
- EnterpriseDefault settings according to q1: access via IDE (chat and code completions): prompts and suggestions "Not retained"; User Engagement Data two years; Feedback Data "as long as needed for its intended purpose". All other access routes (including github.com, Mobile, CLI): prompts and suggestions 28 days; User Engagement Data two years. DPA (October 2025 version), Section 8: after the end of the services, GitHub deletes the Customer Personal Data or returns it at the customer's choice and deletes existing copies "in accordance with our retention and deletion policy" (q13). Unlike q1, the Copilot Trust Center FAQ (q16) assigns Copilot CLI to IDE access: inputs and outputs "Not retained by default" (exception: time-limited retention in the event of confirmed violations of the Acceptable Use Policies or Terms of Service); other access: "Retained for up to 28 days by default".
Ollama- FreePrivacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.
- ProPrivacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.
- MaxPrivacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.
- Team (Early Access)Privacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.
- EnterprisePrivacy Policy (March 2026): for cloud models, prompts and responses are processed only transiently and not stored beyond the time required to fulfil the request; pricing page: prompt and response data is never logged. Account information until deletion on request, billing records according to tax and accounting obligations, support communications until resolved, metadata as needed for operations, then deleted or de-identified. Specific retention periods not publicly documented.
Price
- differs by tool
- GitHub Copilot
- 0 USDFree, Student
- 10 USD/moPro
- 39 USD/moPro+
- 100 USD/moMax
- 19 USD/user/moBusiness
- 39 USD/user/moEnterprise
- Ollama
- 0 USD… (further prices in the details)Free
- 20 USD/mo… (further prices in the details)Pro
- 100 USD/moMax
- from 500 USD/moTeam (Early Access)
- customEnterprise
- GitHub Copilot
- Free
0 USD (q2)
- Student
0 USD for verified students (q2)
- Pro
10 USD/month (q2; free of charge for some user groups)
- Pro+
39 USD/month (q2)
- Max
100 USD/month (q2)
- Business
19 USD per assigned seat/month (q2)
- Enterprise
39 USD per assigned seat/month (q2)
Ollama- Free
0 USD (pricing page). Additional usage credits at token prices per million tokens, e.g. gpt-oss:120b 0.15 USD input and 0.60 USD output; off-peak prices outside 12:00–18:00 UTC on weekdays and all day at weekends. Purchased credits expire after one year; the customer is responsible for taxes (Terms).
- Pro
20 USD per month or 200 USD per year (16.67 USD per month billed annually) (pricing page); one account per person. The customer is responsible for taxes (Terms).
- Max
100 USD per month (pricing page); one account per person. The customer is responsible for taxes (Terms).
- Team (Early Access)
from 500 USD per month (pricing page); usage beyond the included credits is billed from a shared team balance as you go. According to the FAQ, Ollama creates a separate team account on joining. The customer is responsible for taxes (Terms).
- Enterprise
Custom (pricing page: "Custom", volume usage pricing; contact via sales)
- Free
- GitHub Copilotyesall 7 plans
- Ollamayesall 5 plans
- GitHub Copilot
- Free
yes (limited: according to q2, an allowance of GitHub AI Credits, automatic model selection; according to q1, 2000 completions and 50 chat requests)
- Student
yes (allowance of GitHub AI Credits, automatic model selection, without third-party agents; q2)
- Pro
yes (base 1,000 AI Credits; q2)
- Pro+
yes (base 3,900 AI Credits, access to premium models; q2)
- Max
yes (base 10,000 AI Credits, priority access to premium models; q2)
- Business
yes (1,900 AI Credits per user/month, access to premium models; q2)
- Enterprise
yes (3,900 AI Credits per user/month, priority access to premium models; q2; requires GitHub Enterprise Cloud)
Ollama- Free
yes (cloud models with starter usage credits and access to starter models; all cloud models after buying usage credits; local models unlimited; 1 concurrent request)
- Pro
yes (Free plus 60 USD of usage credits per month, larger pro models, several models concurrently, 3 concurrent requests; Fast mode "coming soon" according to the pricing page)
- Max
yes (Pro plus 300 USD of usage credits per month, early access to the newest models, 10 concurrent requests)
- Team (Early Access)
yes (Pro plus unlimited users, 1,000 USD of usage credits per month shared across the team, centralised billing and administration, priority support, 10 concurrent requests; shared projects "coming soon" according to the pricing page)
- Enterprise
yes (Team plus model access controls, cost budgets for users and API keys, private Slack channel with dedicated support, custom security questionnaires)
- Free
Evidence
- GitHub Copilot13 sources
- Ollama4 sources
- GitHub Copilot
- GitHub Copilot: Plans & pricing incl. FAQ (Privacy, Retention, Training)Pricing page / provider FAQ, retrieved 18 Oct 2026
- Plans for GitHub Copilot (GitHub Docs)Official documentation, retrieved 14 Oct 2026
- Hosting of models for GitHub Copilot (GitHub Docs)Official documentation, retrieved 18 Oct 2026
- GitHub SubprocessorsSub-processor list, retrieved 14 Oct 2026
- About storage of your data with data residency (GHE.com)Official documentation, retrieved 14 Oct 2026
- GitHub Copilot with data residencyOfficial documentation, retrieved 14 Oct 2026
- About GitHub Enterprise Cloud with data residencyOfficial documentation, retrieved 14 Oct 2026
- Resources for getting approval of GitHub CopilotOfficial documentation, retrieved 14 Oct 2026
- GitHub General Privacy Statement (effective 2026-04-27)Privacy notices, retrieved 14 Oct 2026
- GitHub Data Protection Agreement (DPA), version October 2025DPA, retrieved 14 Oct 2026
- Managing GitHub Copilot policies as an individual subscriber (GitHub Docs)Documentation, retrieved 18 Oct 2026
- GitHub Copilot Trust Center: FAQ (Privacy, Security, Commercial)Trust Center / provider FAQ, retrieved 18 Oct 2026
- Access GitHub Copilot for free as a student (GitHub Docs)Official documentation, retrieved 18 Oct 2026
Ollama- PricingPricing page, retrieved 18 Oct 2026
- Terms of Service (Last updated: May 2026)Terms and conditions, retrieved 18 Oct 2026
- Privacy Policy (Last updated: March 2026)Privacy notice, retrieved 18 Oct 2026
- Docs: CloudDocumentation, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.
More comparisons
GitHub Copilot compared with
Individual pages: GitHub Copilot, Ollama. All tools in the category: Software development.