AI Vendor Directory · AI assistants (SaaS)
Does Grammarly train on your data?
Depends — varies by plan or setting. Vendor-stated default: configurable — OFF and locked for sales-assisted Business/Enterprise and Education; ON by default for self-serve Business/Pro (admin can disable). Controlled by the "Product Improvement and Training" setting. For Business/Enterprise purchased through the sales team: "Product Improvement and Training is automatically off, meaning we will not use content from any users within that organization to train our models by default" — and it cannot be turned on. For Business bought self-serve on the website: it "will initially be on, and an admin can opt out for their entire organization." Free/Premium/Pro individual accounts default to ON with per-user opt-out. Education is off by default. When on, content is used to train/validate AI-ML models and improve the product for other users.
By the Shieldra Compliance Team · Last updated 2026-07-29
What is Grammarly (Business)?
AI writing assistant that runs across browsers, email and office apps, checking and generating text wherever employees type. SMBs typically deploy it org-wide for writing quality and tone — meaning it sees nearly all typed business text.
Key facts
- Vendor: Grammarly — https://www.grammarly.com/business
- Trains on customer data by default: configurable — OFF and locked for sales-assisted Business/Enterprise and Education; ON by default for self-serve Business/Pro (admin can disable)
- Source for the training answer: https://support.grammarly.com/hc/en-us/articles/25555503115277-Product-Improvement-and-Training-Control
- Data residency: US (AWS US East)
- Last verified: 2026-07-29
What certifications does Grammarly hold?
- SOC 2 Type II
- SOC 3
- ISO 27001:2022
- ISO 27017
- ISO 27018
- ISO 27701
- ISO 42001
- PCI DSS
Security, DPA, and subprocessor links
- Security / trust page: https://www.grammarly.com/security
What is your EU AI Act role when you build on Grammarly?
Your organization is a deployer under the EU AI Act; Grammarly is the provider. Key registry action: record which purchase channel you used, since it flips the training default; EU AI Act transparency exposure is low for writing assistance.
What to record in your AI registry
- Provider: Grammarly
- Model type: third party api
- Data typically flowing to the vendor: all typed text across apps (emails, documents, HR/legal content)
Sources
- https://www.grammarly.com/trust
- https://support.grammarly.com/hc/en-us/articles/25555503115277-Product-Improvement-and-Training-Control
- https://www.grammarly.com/security
Disclaimer
Curated from vendor-published pages on the date above. Vendor terms change - verify against the cited sources before relying on a profile for a procurement decision. Last verified 2026-07-29.
Frequently asked questions
Does Grammarly train AI models on your data?
Depends — varies by plan or setting. Vendor-stated default: configurable — OFF and locked for sales-assisted Business/Enterprise and Education; ON by default for self-serve Business/Pro (admin can disable). Controlled by the "Product Improvement and Training" setting. For Business/Enterprise purchased through the sales team: "Product Improvement and Training is automatically off, meaning we will not use content from any users within that organization to train our models by default" — and it cannot be turned on. For Business bought self-serve on the website: it "will initially be on, and an admin can opt out for their entire organization." Free/Premium/Pro individual accounts default to ON with per-user opt-out. Education is off by default. When on, content is used to train/validate AI-ML models and improve the product for other users.
What certifications does Grammarly hold?
Per the vendor's published pages as of 2026-07-29: SOC 2 Type II; SOC 3; ISO 27001:2022; ISO 27017; ISO 27018; ISO 27701; ISO 42001; PCI DSS.
Where does Grammarly store your data?
Vendor-listed data residency options as of 2026-07-29: US (AWS US East).
What is your EU AI Act role when you build on Grammarly?
Your organization is a deployer under the EU AI Act; Grammarly is the provider. Key registry action: record which purchase channel you used, since it flips the training default; EU AI Act transparency exposure is low for writing assistance.
