AI tools and client data

Is Perplexity Comet safe for client data?

Short answer: Whether Perplexity Comet is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself. On Comet on a personal account, we did not find a statement about model training in the pages we read; on Comet for Enterprise, Perplexity says it does not train its models on the pages staff open, by default. Every fact on this page is Perplexity's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap. Obsidian Ridge's free 30-day AI security assessment shows which AI tools your staff actually use.

By Kfir Yair, CISSP. Published . Updated .

See which AI tools your staff use

Plan by plan, in Perplexity’s own words

A Chromium browser with Perplexity's assistant built in, which can read the open tab and act on the person's behalf across sites they are signed into. Staff install a browser without asking anybody, and this one carries an assistant with the same logins they have.

What you are askingComet on a personal accountComet for Enterprise
Trains the vendor's models by defaultNot found in the pages we read.No, and nothing is logged either. Perplexity makes this the difference between the enterprise product and the consumer one, in those words.“For Enterprise users, no data is ever logged or used to train AI models, ensuring a strong privacy advantage over consumer browsers.” source, read
How to turn training offNot found in the pages we read.Not found in the pages we read.
How long data is keptUp to 30 days for whatever a request needed — page content, history items or the contents of other tabs — then deleted.“then this context is stored securely for up to 30 days to power Library and query history features, and is automatically deleted after that.” source, read Not found in the pages we read.
What an admin can see or controlNot found in the pages we read.An administrator can restrict what the agent is allowed to do, which is the control that matters when the agent has the staff member's logins.“Organization admins can control Comet’s AI capabilities, including restricting what actions Comet’s AI agent can perform within your organization.” source, read
Single sign-onNot found in the pages we read.Not found in the pages we read.
Business Associate AgreementNot found in the pages we read.Not found in the pages we read.
Where the data is processedOn the machine, by default. Perplexity lists browsing history, cookies, passwords, local files and what you type into sites as staying there.“These remain stored locally inside Comet and your operating system.” source, read Not found in the pages we read.

An empty cell is not a reassurance and not a criticism. "Not found in the pages we read." means the Perplexity pages listed under Sources, read on the dates shown, do not answer it — so there is nothing for us to repeat, and something for you to ask Perplexity before client information goes near it.

What this means for

The duty does not change because the tool is new. What changes is where the client information ends up.

  • Law firms. A client confidence pasted into a personal account has left the firm’s control. Our law firm page sets out the duties we build evidence for; the decision here is whether a personal account may touch a client matter at all.
  • Dental and medical practices. We didn't find a BAA statement in the pages listed below; ask Perplexity before any patient data goes in. See dental practices.
  • CPA and accounting firms. Your written information security plan has to describe the tools people actually use, not the ones you approved. See accounting firms.
  • Financial advisers. Client account data in a personal assistant is the exposure; see financial advisers.
  • Software teams. A coding assistant reads the repository and can run commands, so the question is what it can reach, not what it was asked. See what AI agents on work laptops can reach.

How to tell which version your staff use

The plan is the whole answer, and you cannot tell from the outside. Three ways to find out, in order of how much they prove.

  1. 1. Ask

    Quick, free, and incomplete. People forget the tool they installed once and the account they signed in with.

  2. 2. Look at the billing and the admin console

    This finds what the business pays for. It does not find a personal account, which is the one that matters here.

  3. 3. Look on the computers

    A tool somebody installed themselves never appears in an IT list. Obsidian Ridge’s free 30-day AI security assessment takes a quiet inventory for 30 days and shows what each tool could reach, then a CISSP goes through it with you. See the assessment, or read a sample set of findings.

Settings to check today

From Perplexity’s own documentation. Each one is a change somebody can make this afternoon.

  • Decide whether the assistant may run at all, per site. Both controls live in the browser's own settings, not in an admin console.“Disable Comet Assistant entirely” source, read
  • Know what triggers a send. Nothing leaves until a request needs it, which means the request is the event to govern.“Comet sends data only when a request requires it.” source, read
  • If you deploy it, use the Chromium policies. Perplexity says the usual browser management applies, which is how you would govern any other browser.“Comet supports 500+ Chromium-based browser policies that allow you to customize the browsing experience for your organization.” source, read
  • Audit logs need scale. A small practice will not reach the seat counts Perplexity attaches them to, so plan to govern without them.“Organizations with 50 or more Enterprise Pro seats, or at least one Enterprise Max seat, can enable Audit Logs.” source, read

Worth knowing

  • Perplexity says it sends the minimum rather than everything, which is the claim to hold it to when a client asks what the browser saw.“In these cases, only the minimal required context is sent — not your full browsing history or all tab contents.” source, read
  • Staff can clear the stored browsing data, passwords and payment details themselves. Useful, and also means a record can disappear before you ask for it.“Users can manage their data collection settings in Comet Settings, including deleting stored browsing data, saved passwords, sign-in data, and payment information.” source, read

Questions we get asked

Is Perplexity Comet safe for client data?

Whether Perplexity Comet is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself.

On Comet on a personal account, we did not find a statement about model training in the pages we read; on Comet for Enterprise, Perplexity says it does not train its models on the pages staff open, by default.

Every fact on this page is Perplexity's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap.

Does Perplexity train its models on what we put into Perplexity Comet?

On Comet on a personal account, we did not find a statement about model training in the pages we read; on Comet for Enterprise, Perplexity says it does not train its models on the pages staff open, by default.

On Comet on a personal account: Not found in the pages we read. On Comet for Enterprise: No, and nothing is logged either. Perplexity makes this the difference between the enterprise product and the consumer one, in those words.

Perplexity's own words: "For Enterprise users, no data is ever logged or used to train AI models, ensuring a strong privacy advantage over consumer browsers." (read 2026-11-03).

How long does Perplexity keep what we put into Perplexity Comet?

On Comet on a personal account: Up to 30 days for whatever a request needed — page content, history items or the contents of other tabs — then deleted.

Perplexity's own words: "then this context is stored securely for up to 30 days to power Library and query history features, and is automatically deleted after that." (read 2026-11-03).

On Comet for Enterprise: Not found in the pages we read.

Can an administrator read what we put into Perplexity Comet?

On Comet on a personal account: Not found in the pages we read. On Comet for Enterprise: An administrator can restrict what the agent is allowed to do, which is the control that matters when the agent has the staff member's logins.

Perplexity's own words: "Organization admins can control Comet’s AI capabilities, including restricting what actions Comet’s AI agent can perform within your organization." (read 2026-11-03).

Will Perplexity sign a Business Associate Agreement for Perplexity Comet?

We didn't find a BAA statement in the pages listed below; ask Perplexity before any patient data goes in.

How do we find out which version of Perplexity Comet our staff are using?

Look on the computers. A tool somebody installed themselves, or signed into with a personal account, does not appear in any IT list. Obsidian Ridge's free 30-day AI security assessment takes that inventory for 30 days and shows what each tool could reach.

Sources

Perplexity’s own pages, with the date each was read. Nothing on this page comes from anywhere else.

All 35 tools, side by side, or run the AI tool risk checker over the ones you know about.

Other tools people ask about

Same question, different answers. The ones in the same category are the ones staff swap between.