Grammarly
medium riskAI Writinggrammarly.com, app.grammarly.com
Data-handling profile
- Trains on input
- Yes, on the consumer tier (enterprise tier excluded)
- Retention
- Processes text typed across apps; enterprise has stricter controls
- Data region
- US
- Certifications
- SOC 2 Type IIISO 27001
- DPA available
- Yes
- Breach history
- 2018 browser extension token bug
- EU AI Act
- Text processing across endpoints
Sources
Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.
Change history
No material changes recorded since monitoring began.