AI Vendor Directory · Coding assistants
Does Replit train on your data?
Depends — varies by plan or setting. Vendor-stated default: no for private Apps (Teams/Enterprise default); yes for public Apps. Replit's Terms of Service: 'Content published in public Apps may be used by Replit for improving the Service, including but not limited to developing or training large language models.' Private Apps carry no such training grant, and paid/Teams/Enterprise content is private by default (Commercial Agreement: customer content used for tuning only at the customer's request, for that customer's sole use). Free-tier Apps are public — assume trainable. For third-party models via Replit's AI integrations: paid endpoints have training disabled; free model endpoints 'may train on your prompts and completions' and may publish them to public datasets; Enterprise requests are restricted to Zero Data Retention endpoints only. No self-serve global opt-out for public-App training.
By the Shieldra Compliance Team · Last updated 2026-07-29
What is Replit?
Cloud development platform with Replit Agent for AI app-building; SMBs use it for rapid prototyping and internal tools. Training exposure hinges on whether an App is public or private.
Key facts
- Vendor: Replit — https://replit.com
- Trains on customer data by default: no for private Apps (Teams/Enterprise default); yes for public Apps
- Source for the training answer: https://replit.com/terms-of-service
- Last verified: 2026-07-29
What certifications does Replit hold?
Security, DPA, and subprocessor links
- Security / trust page: https://replit.com/security
- Data processing agreement (DPA): https://replit.com/dpa
- Subprocessor list: https://replit.com/subprocessors
What is your EU AI Act role when you build on Replit?
Building an app on Replit that itself exposes AI features can make you the provider (or at least deployer) of that downstream AI system under the EU AI Act — assess the app you ship, not just the tool. Internal-only use of Replit Agent is plain deployer territory.
What to record in your AI registry
- Provider: Replit
- Model type: third party api
- Data typically flowing to the vendor: source code, prompts and chat, app data and secrets, deployment logs
Sources
- https://replit.com/terms-of-service
- https://replit.com/privacy-policy
- https://replit.com/security
- https://docs.replit.com/features/integrations/replit-ai-integrations
- https://trust.replit.com/
Disclaimer
Curated from vendor-published pages on the date above. Vendor terms change - verify against the cited sources before relying on a profile for a procurement decision. Last verified 2026-07-29.
Frequently asked questions
Does Replit train AI models on your data?
Depends — varies by plan or setting. Vendor-stated default: no for private Apps (Teams/Enterprise default); yes for public Apps. Replit's Terms of Service: 'Content published in public Apps may be used by Replit for improving the Service, including but not limited to developing or training large language models.' Private Apps carry no such training grant, and paid/Teams/Enterprise content is private by default (Commercial Agreement: customer content used for tuning only at the customer's request, for that customer's sole use). Free-tier Apps are public — assume trainable. For third-party models via Replit's AI integrations: paid endpoints have training disabled; free model endpoints 'may train on your prompts and completions' and may publish them to public datasets; Enterprise requests are restricted to Zero Data Retention endpoints only. No self-serve global opt-out for public-App training.
What certifications does Replit hold?
Per the vendor's published pages as of 2026-07-29: SOC 2 Type II.
What is your EU AI Act role when you build on Replit?
Building an app on Replit that itself exposes AI features can make you the provider (or at least deployer) of that downstream AI system under the EU AI Act — assess the app you ship, not just the tool. Internal-only use of Replit Agent is plain deployer territory.
