The AI agent allow list checked 1,413 agent and coding-tool vendors against their own published terms for whether the agent trains on what it sees, dated 4 November 2026.
A chatbot sees what you type. An agent can see a whole repository, a whole screen, or a whole logged-in session.
Coding agents and agent platforms first, then by domain. A vendor not in this table has not yet been checked in the published register.
Every value below is our own classification, derived from the vendor's own published privacy policy, terms of service or terms of use, not the vendor's wording. Search that vendor's own published terms to verify directly. See our accuracy note and correction path.
| Vendor | Category | Trains on data | Opt-out | Enterprise | API | Checked | On file |
|---|---|---|---|---|---|---|---|
| Cursor cursor.com | Agents & Automation | No | Yes | Yes | Not stated | 17 Sep 2026 | Checked against the vendor's own policy |
| pull requests github.com | Agents & Automation | Trains unless opted out | Yes | Yes | Not stated | 17 Sep 2026 | Checked against the vendor's own policy |
| ChatGPT openai.com | Code & Development | Trains unless opted out | Yes | Yes | Yes | 17 Sep 2026 | Checked against the vendor's own policy |
| Devin devin.ai | Code & Development | Not stated | Not stated | No | Not stated | 17 Sep 2026 | No source on file |
| Zapier Central zapier.com | Agents & Automation | Trains unless opted out | Yes | Yes | Not stated | 17 Sep 2026 | Checked against the vendor's own policy |
| n8n n8n.io | Agents & Automation | No | Not stated | Yes | Not stated | 17 Sep 2026 | Checked against the vendor's own policy |
| browser-use browser-use.com | Agents & Automation | Yes | Not stated | Not stated | Not stated | 17 Sep 2026 | Checked against the vendor's own policy |
| Bolt x Figma bolt.new | Agents & Automation | Not stated | Not stated | Yes | Not stated | 18 Sep 2026 | No source on file |
| Grok API x.ai | Agents & Automation | Yes | Not stated | Not stated | Not stated | 17 Sep 2026 | Checked against the vendor's own policy |
| 11.ai 11.ai | Agents & Automation | Trains unless opted out | Yes | Not stated | Not stated | 17 Sep 2026 | Checked against the vendor's own policy |
| fx (by Vercel) fx.sh | Agents & Automation | Not stated | Yes | Yes | Not stated | 18 Sep 2026 | No source on file |
| Pi pi.ai | Agents & Automation | Trains unless opted out | Yes | Not stated | Not stated | 18 Sep 2026 | Checked against the vendor's own policy |
| OpenMarket m11.ai | Agents & Automation | Not stated | Not stated | no_tier | no_tier | 18 Sep 2026 | No source on file |
| Any.do any.do | Agents & Automation | Not stated | Not stated | Not stated | Yes | 18 Sep 2026 | No source on file |
| omiGPT omi.me | Agents & Automation | No | Not stated | Not stated | Not stated | 18 Sep 2026 | Checked against the vendor's own policy |
| VDF AI Networks vdf.ai | Agents & Automation | Not stated | Not stated | No | Not stated | 18 Sep 2026 | No source on file |
| Ito AI ito.ai | Code & Development | No | Not stated | no_tier | no_tier | 18 Sep 2026 | Checked against the vendor's own policy |
| sim sim.ai | Agents & Automation | No | Not stated | Yes | Yes | 17 Sep 2026 | Checked against the vendor's own policy |
| Qvio™️ hia.ai | Agents & Automation | Not stated | Not stated | no_tier | no_tier | 17 Sep 2026 | No source on file |
| Exa exa.ai | Agents & Automation | Yes | Not stated | Yes | Yes | 17 Sep 2026 | Checked against the vendor's own policy |
| 11x.ai 11x.ai | Agents & Automation | Not stated | Not stated | Yes | Not stated | 18 Sep 2026 | No source on file |
| Furl furl.ai | Agents & Automation | No | Not stated | Not stated | Not stated | 18 Sep 2026 | Checked against the vendor's own policy |
| Aito aito.ai | Agents & Automation | No | Not stated | No | Not stated | 18 Sep 2026 | Checked against the vendor's own policy |
| Gedo gedo.ai | Agents & Automation | No | Yes | no_tier | no_tier | 18 Sep 2026 | Checked against the vendor's own policy |
| Plow Latch plow.co | Agents & Automation | No | Not stated | Not stated | Not stated | 18 Sep 2026 | Checked against the vendor's own policy |
| Cust cust.co | Agents & Automation | Not stated | Not stated | Yes | no_tier | 18 Sep 2026 | No source on file |
| Auxx.ai auxx.ai | Agents & Automation | Not stated | Not stated | Yes | Yes | 18 Sep 2026 | No source on file |
| Aira aira.io | Agents & Automation | Yes | Not stated | no_tier | no_tier | 18 Sep 2026 | Checked against the vendor's own policy |
| Awaz.ai awaz.ai | Agents & Automation | Trains unless opted out | Yes | No | Not stated | 18 Sep 2026 | Checked against the vendor's own policy |
| Qodo qodo.ai | Code & Development | Trains unless opted out | Yes | Yes | Yes | 17 Sep 2026 | Checked against the vendor's own policy |
| Fimo fimo.ai | Agents & Automation | Not stated | Not stated | Yes | Not stated | 18 Sep 2026 | No source on file |
| Felo felo.ai | Agents & Automation | Not stated | Not stated | No | Not stated | 18 Sep 2026 | No source on file |
| Enjo.ai enjo.ai | Agents & Automation | No | Not stated | Yes | Yes | 18 Sep 2026 | Checked against the vendor's own policy |
| Effy effy.ai | Agents & Automation | No | Not stated | Yes | Not stated | 18 Sep 2026 | Checked against the vendor's own policy |
| Kore.ai kore.ai | Agents & Automation | Not stated | Not stated | Yes | Not stated | 18 Sep 2026 | No source on file |
| Oumi oumi.ai | Code & Development | Not stated | Not stated | Yes | Not stated | 18 Sep 2026 | No source on file |
| Gong.io gong.io | Agents & Automation | Not stated | Not stated | Yes | Not stated | 18 Sep 2026 | No source on file |
| Gong.AI gong.ai | Agents & Automation | Not stated | Not stated | Yes | Not stated | 18 Sep 2026 | No source on file |
| is.team is.team | Agents & Automation | No | Not stated | Not stated | Not stated | 18 Sep 2026 | Checked against the vendor's own policy |
| Kilo kilo.ai | Code & Development | Yes | Yes | Not stated | Not stated | 17 Sep 2026 | Checked against the vendor's own policy |
A coding agent with repo access can read files a chat window never would: configuration, credentials left in code, internal comments.
A browser agent captures whatever is on screen during a session, including logged-in pages the user never intended to share.
Agents often operate with the same session tokens and API keys as the user, widening what a training exception could actually expose.
Four fields per vendor, with values and a clause on click: trains on data, opt-out available, enterprise tier excludes training, API tier excludes training.
Seven more fields are locked and shown by name, unlocked in the full register.
Regardless of what a vendor's terms say about training, the AI agent allow list keeps agents restricted to approved page types, so a training gap in one vendor's policy is not the only line of defense.
See the page-type database this runs on.
A dated record of what each AI agent and coding-tool vendor's own published terms say about training on what the agent sees: your code, your screen, your files.
A chatbot sees what you type. A coding agent can see a whole repository. A browser agent can see a whole logged-in session. The training question applies to a much larger surface.
161 of the vendors checked state they train on submitted data by default, 72 train unless the user opts out, 464 state they do not train, and 716 do not state a position, as of this page's snapshot.
It keeps agents restricted to approved page types regardless of what any individual vendor's terms say, so a training gap in one vendor's policy is not the only control in place.
Seven additional fields, including opt-out scope, feedback exceptions and monitoring retention, are shown by name only here and unlocked in the AI Tools Blocklist register product.
The full register adds opt-out scope, retention, human review and subprocessor training for every vendor above.
