AI tools and client data

Is Grok safe for client data?

Short answer: Whether Grok is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself. On Free and SuperGrok (personal account), SpaceXSI may use what staff type to train its models; on SpaceXSI Business and SpaceXSI Enterprise, SpaceXSI says it does not train its models on what staff type, by default. Every fact on this page is SpaceXSI's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap. Obsidian Ridge's free 30-day AI security assessment shows which AI tools your staff actually use.

By Kfir Yair, CISSP. Published . Updated .

See which AI tools your staff use

Plan by plan, in SpaceXSI’s own words

A general-purpose AI chatbot with voice, image generation and web search, reached through grok.com, the apps and inside X. Staff sign into it personally, which is the version this page is mostly about. SpaceXSI is the company formerly called xAI.

What you are askingFree and SuperGrok (personal account)SpaceXSI Business and SpaceXSI Enterprise
Trains the vendor's models by defaultYes. Training the models is one of the published purposes, and we found no setting in these pages that stops it on a personal account.“To develop and improve our Service and to conduct research: For example to develop new product features, to train our models, to identify usage trends…” source, read No. It is two words in a feature list rather than a paragraph, but it is the vendor's own statement and it is the opposite of the personal plan.“No training” source, read
How to turn training offNot found in the pages we read.Not found in the pages we read.
How long data is keptNo period for ordinary use. SpaceXSI makes it depend on which features and settings you use — see Private Chat below.“The length of time we retain data may depend on the features or settings you use.” source, read Set by agreement rather than published. Which means somebody at your practice has to know what was agreed.“Custom data retention” source, read
What an admin can see or controlNot found in the pages we read.Keys you hold and isolation from other customers, on the enterprise tier.“Your data is encrypted with your keys, under your control, and isolated from all other customers.” source, read
Single sign-onNot found in the pages we read.Single sign-on is a business-plan feature, so a personal Grok account is a password and nothing else.“Custom Single Sign On (SSO)” source, read
Business Associate AgreementNot found in the pages we read.Not found in the pages we read.
Where the data is processedNot found in the pages we read.Not found in the pages we read.

An empty cell is not a reassurance and not a criticism. "Not found in the pages we read." means the SpaceXSI pages listed under Sources, read on the dates shown, do not answer it — so there is nothing for us to repeat, and something for you to ask SpaceXSI before client information goes near it.

What this means for

The duty does not change because the tool is new. What changes is where the client information ends up.

  • Law firms. A client confidence pasted into a personal account has left the firm’s control. Our law firm page sets out the duties we build evidence for; the decision here is whether a personal account may touch a client matter at all.
  • Dental and medical practices. We didn't find a BAA statement in the pages listed below; ask SpaceXSI before any patient data goes in. See dental practices.
  • CPA and accounting firms. Your written information security plan has to describe the tools people actually use, not the ones you approved. See accounting firms.
  • Financial advisers. Client account data in a personal assistant is the exposure; see financial advisers.
  • Software teams. A coding assistant reads the repository and can run commands, so the question is what it can reach, not what it was asked. See what AI agents on work laptops can reach.

How to tell which version your staff use

The plan is the whole answer, and you cannot tell from the outside. Three ways to find out, in order of how much they prove.

  1. 1. Ask

    Quick, free, and incomplete. People forget the tool they installed once and the account they signed in with.

  2. 2. Look at the billing and the admin console

    This finds what the business pays for. It does not find a personal account, which is the one that matters here.

  3. 3. Look on the computers

    A tool somebody installed themselves never appears in an IT list. Obsidian Ridge’s free 30-day AI security assessment takes a quiet inventory for 30 days and shows what each tool could reach, then a CISSP goes through it with you. See the assessment, or read a sample set of findings.

Settings to check today

From SpaceXSI’s own documentation. Each one is a change somebody can make this afternoon.

  • Turn on Private Chat if anyone is going to use a personal account for anything near work. It is the only published control over retention.“when Private Chat is turned on, conversations will not appear in your conversation history…” source, read
  • Know what deleting actually does, and that it is 30 days rather than immediate, with exceptions SpaceXSI reserves.“if you choose to delete your account, we will delete the data within 30 days unless it is necessary to retain the data…” source, read
  • If you are buying the business tier, ask for customer-managed keys by name. SpaceXSI lists it, which means it is not the default.“Customer-Managed Encryption Keys” source, read

Worth knowing

  • The plainest warning any vendor here gives about what happens to a client's name once it is in a prompt.“If you include personal information in Inputs you provide to the Service, this information may be reproduced in the Output.” source, read
  • If somebody connects Grok to their Google account, SpaceXSI carves that content out of training specifically — which tells you the rest is not carved out.“SpaceXSI shall not use any Google Apps content for any of its internal AI or other training purposes (such as training its machine learning models)…” source, read
  • SpaceXSI publishes this about sensitive and special-category data in training data. Ask SpaceXSI what it covers for your plan.“SpaceXSI does not process training data for the purposes of inferring or deriving any sensitive or special category data about individuals…” source, read

Questions we get asked

Is Grok safe for client data?

Whether Grok is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself.

On Free and SuperGrok (personal account), SpaceXSI may use what staff type to train its models; on SpaceXSI Business and SpaceXSI Enterprise, SpaceXSI says it does not train its models on what staff type, by default.

Every fact on this page is SpaceXSI's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap.

Does SpaceXSI train its models on what we put into Grok?

On Free and SuperGrok (personal account), SpaceXSI may use what staff type to train its models; on SpaceXSI Business and SpaceXSI Enterprise, SpaceXSI says it does not train its models on what staff type, by default.

On Free and SuperGrok (personal account): Yes. Training the models is one of the published purposes, and we found no setting in these pages that stops it on a personal account.

SpaceXSI's own words: "To develop and improve our Service and to conduct research: For example to develop new product features, to train our models, to identify usage trends…" (read 2026-11-03).

On SpaceXSI Business and SpaceXSI Enterprise: No. It is two words in a feature list rather than a paragraph, but it is the vendor's own statement and it is the opposite of the personal plan.

SpaceXSI's own words: "No training" (read 2026-11-03).

How long does SpaceXSI keep what we put into Grok?

On Free and SuperGrok (personal account): No period for ordinary use. SpaceXSI makes it depend on which features and settings you use — see Private Chat below.

SpaceXSI's own words: "The length of time we retain data may depend on the features or settings you use." (read 2026-11-03). On SpaceXSI Business and SpaceXSI Enterprise: Set by agreement rather than published.

Which means somebody at your practice has to know what was agreed. SpaceXSI's own words: "Custom data retention" (read 2026-11-03).

Can an administrator read what we put into Grok?

On Free and SuperGrok (personal account): Not found in the pages we read. On SpaceXSI Business and SpaceXSI Enterprise: Keys you hold and isolation from other customers, on the enterprise tier.

SpaceXSI's own words: "Your data is encrypted with your keys, under your control, and isolated from all other customers." (read 2026-11-03).

Will SpaceXSI sign a Business Associate Agreement for Grok?

We didn't find a BAA statement in the pages listed below; ask SpaceXSI before any patient data goes in.

How do we find out which version of Grok our staff are using?

Look on the computers. A tool somebody installed themselves, or signed into with a personal account, does not appear in any IT list. Obsidian Ridge's free 30-day AI security assessment takes that inventory for 30 days and shows what each tool could reach.

Sources

SpaceXSI’s own pages, with the date each was read. Nothing on this page comes from anywhere else.

All 35 tools, side by side, or run the AI tool risk checker over the ones you know about.

Other tools people ask about

Same question, different answers. The ones in the same category are the ones staff swap between.