GitHub
Your own published record, as at 2026-08-07.
Your Details
The Macro Picture17
2 conditional rows (Commercial Tier = Individual (non-volume-licensed) · Hosting Locality = EU or Australia region) sit outside these counts. A Variant is a stated deployment mode, not a published offering, and the Grid Standard holds it to its own band.
What Is Published8
Your Own Words3
Your agreement consists of this terms module for GitHub Generative AI Services, combined with your main volume licensing agreement with us – the GitHub Customer Agreement’s General Terms, or the GitHub Corporate Terms of Service or similar legacy agreement. This combined document is the “Agreement.”
We’ll retain your Personal Data as long as your account is active and as needed to fulfill contractual obligations, comply with legal requirements, resolve disputes, and enforce agreements. The retention duration depends on the purpose of data collection and any legal obligations.
The GitHub Subprocessor List identifies subprocessors authorized to subprocess customer or personal data on behalf of GitHub to provide services to our Enterprise customers. This list is applicable for all GitHub services governed by the GitHub Data Protection Agreement.
Parties You Name30
Register Check3
AI Role By Offering1
Assessment Basis
Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.
Read from 16 first-party surface(s) across 1 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.
- Fact Record
- Version 1.0, dated 2026-08-07
- Standards Commit
- 3fc7d391
- Register Control Quality
- Both Views
Verification And Challenge
Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-07. Correspondence route as recorded on this card input: ror@blacksnowintel.com.
What A Machine Could Not Establish3
3 questions are open and 5 are established, read as at 2026-08-07 under method v1.6.
Publish it: say whether decisions about people are made automatically.
A finding on the public record.
Where To Put It
This was read on your own page at https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.
Where Others Stand
4 organisations in the register say whether decisions about people are made automatically. You do not.
What A Published Answer Looks Like
Under certain laws, residents may also be permitted to opt out of certain profiling relating to automated processing analyzing certain categories of an individual's information that would produce a legal or similarly significant effect. [the vendor] does not engage in this type of profiling of individuals.
A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published trust or security page. Claim tier Quoted. The organisation that published it is not named. A name in the original is replaced; nothing else in the sentence is changed.
One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.
Still Open
Deep Dive
The full assessment, plus consulting on what to fix.

