AI Vendor Directory · AI assistants (SaaS)
Does Grammarly train on your data?
Depends — varies by plan or setting. Vendor-stated default: configurable — OFF and locked for sales-assisted Business/Enterprise and Education; ON by default for self-serve Business/Pro (admin can disable). Controlled by the "Product Improvement and Training" setting. For Business/Enterprise purchased through the sales team: "Product Improvement and Training is automatically off, meaning we will not use content from any users within that organization to train our models by default" — and it cannot be turned on. For Business bought self-serve on the website: it "will initially be on, and an admin can opt out for their entire organization." Free/Premium/Pro individual accounts default to ON with per-user opt-out. Education is off by default. When on, content is used to train/validate AI-ML models and improve the product for other users.
What is Grammarly (Business)?
AI writing assistant that runs across browsers, email and office apps, checking and generating text wherever employees type. SMBs typically deploy it org-wide for writing quality and tone — meaning it sees nearly all typed business text.
Key facts
- Vendor: Grammarly — https://www.grammarly.com/business
- Trains on customer data by default: configurable — OFF and locked for sales-assisted Business/Enterprise and Education; ON by default for self-serve Business/Pro (admin can disable)
- Source for the training answer: https://support.grammarly.com/hc/en-us/articles/25555503115277-Product-Improvement-and-Training-Control
- Data residency: US (AWS US East)
- Last verified: 2026-07-29
What certifications does Grammarly hold?
- SOC 2 Type II
- SOC 3
- ISO 27001:2022
- ISO 27017
- ISO 27018
- ISO 27701
- ISO 42001
- PCI DSS
Security, DPA, and subprocessor links
- Security / trust page: https://www.grammarly.com/security
What is your EU AI Act role when you build on Grammarly?
Your organization is a deployer under the EU AI Act; Grammarly is the provider. Key registry action: record which purchase channel you used, since it flips the training default; EU AI Act transparency exposure is low for writing assistance.
What to record in your AI registry
- Provider: Grammarly
- Model type: third party api
- Data typically flowing to the vendor: all typed text across apps (emails, documents, HR/legal content)
Sources
- https://www.grammarly.com/trust
- https://support.grammarly.com/hc/en-us/articles/25555503115277-Product-Improvement-and-Training-Control
- https://www.grammarly.com/security
Disclaimer
Curated from vendor-published pages on the date above. Vendor terms change - verify against the cited sources before relying on a profile for a procurement decision. Last verified 2026-07-29.
Frequently asked questions
Does Grammarly train AI models on your data?
Depends — varies by plan or setting. Vendor-stated default: configurable — OFF and locked for sales-assisted Business/Enterprise and Education; ON by default for self-serve Business/Pro (admin can disable). Controlled by the "Product Improvement and Training" setting. For Business/Enterprise purchased through the sales team: "Product Improvement and Training is automatically off, meaning we will not use content from any users within that organization to train our models by default" — and it cannot be turned on. For Business bought self-serve on the website: it "will initially be on, and an admin can opt out for their entire organization." Free/Premium/Pro individual accounts default to ON with per-user opt-out. Education is off by default. When on, content is used to train/validate AI-ML models and improve the product for other users.
What certifications does Grammarly hold?
Per the vendor's published pages as of 2026-07-29: SOC 2 Type II; SOC 3; ISO 27001:2022; ISO 27017; ISO 27018; ISO 27701; ISO 42001; PCI DSS.
Where does Grammarly store your data?
Vendor-listed data residency options as of 2026-07-29: US (AWS US East).
What is your EU AI Act role when you build on Grammarly?
Your organization is a deployer under the EU AI Act; Grammarly is the provider. Key registry action: record which purchase channel you used, since it flips the training default; EU AI Act transparency exposure is low for writing assistance.