Questions about Copilot Code Review security risks

[yuki-fujishimawp]

Select Topic Area

Question

Copilot Feature Area

Copilot Enterprise

Body

I am using the GitHub Copilot Enterprise plan within my organization.
I understand that code is not used for training in the basic functionality,
but does this also apply to GitHub Copilot Code Review?

[imDarshanGK]

@yuki-fujishimawp

No, the same applies to GitHub Copilot Code Review. Code is not used for training in the basic functionality of Copilot, including Code Review, in GitHub Copilot Enterprise. Your code remains private unless otherwise specified by your organization's settings.

[yuki-fujishimawp]

@imDarshanGK
Thank you for your prompt and clear response.
I appreciate your support!

[sirajahmedx]

Hello! Yes, your code is not used for training in GitHub Copilot Code Review either. GitHub confirms that with the Enterprise plan, your code stays private and is never used to train any models.

@yuki-fujishimawp Hope that helps!

[yuki-fujishimawp]

@sirajahmedx
Thank you for your prompt and clear response.
I appreciate your support!

[tajammalhdev]

Yes, according to Microsoft, GitHub Copilot Enterprise does not use your code or prompt content to train its underlying models. This policy applies to all Copilot features, including Copilot Code Review.

[jahanaj098]

Yes...With GitHub Copilot Enterprise, neither your code nor your code review data is used to train GitHub Copilot or its underlying models. Your code stays private to your organization.

[PRIYAtechky]

Yes, GitHub Copilot Enterprise ensures that your organization's code is not used for training in both the basic functionality of Copilot and in Copilot Code Review.

• For Copilot Enterprise (including Copilot Chat and Code Review), GitHub explicitly states that your code, prompts, or completions are not used to train the models.
• The models are pre-trained, and the code you provide is only used to generate suggestions and reviews within your environment.
• This ensures privacy and security for your organization’s proprietary codebase.

👉 In short: Your code remains private, and neither Copilot's completions nor Copilot Code Review submissions are used for model training.

[Rupesh09876]

Great question! Thanks for asking about how data is handled in GitHub Copilot Enterprise and specifically within Copilot Code Review.

Training Data: Just like with the core GitHub Copilot functionality, your code is not used to train the underlying AI models when you’re using GitHub Copilot Enterprise. This applies across features, including Copilot Code Review.

Data Usage: Your code and comments may be processed temporarily to provide the review suggestions, but they are not retained or used to retrain the model.

Enterprise Guarantees: GitHub Copilot Enterprise follows the same data protection commitments outlined in the GitHub Copilot for Business and Enterprise documentation
. That means your organization’s intellectual property remains protected.

Transparency: For added assurance, GitHub provides detailed documentation about data privacy, retention, and compliance. You can review the official statement here: GitHub Copilot Trust Center
.

✅ So in short: No — code used in GitHub Copilot Code Review is not used to train AI models. It’s processed securely to generate suggestions, respecting the same enterprise-grade privacy and compliance guarantees.

[MuratKomurcu1]

Yes, the same data protection applies to GitHub Copilot Code Review
GitHub does not use either Copilot Business or Enterprise data to train its models GitHubGitHub - this protection extends to all GitHub Copilot Enterprise features, including Code Review.