Turn this comparison into procurement-ready diligence
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
SIDE-BY-SIDE · 2 OF 3
Two platforms.
Same questions.
GitHub Copilot
DEVELOPER / CODING
PROMPT
GitHub does not claim ownership over code inputs. Code submitted to Copilot remains the user's property.
OUTPUT
GitHub does not assert ownership over code suggestions. Users are responsible for determining the IP status of generated code.
TRAINING
GitHub Privacy Statement confirms: 'Product Development and Improvement: We use Personal Data to develop and improve our products, services, and technologies, including artificial intelligence and machine learning technologies. This includes improving features, developing new offerings, enhancing safety and security capabilities, and training models. We apply appropriate technical safeguards, including aggregation and de-identification techniques where feasible.' Affiliates including Microsoft may also receive data for 'product development and improvement (including training and improving artificial intelligence and machine learning technologies).' Individual tier: code snippets and telemetry may be used for training (opt-out in IDE settings). Business/Enterprise: training on user code is off by default, no data retention beyond session.
COMMERCIAL
Commercial use is the primary intended use case, particularly for Copilot for Business and Enterprise plans.
208 verified findings across the displayed surfaces.
Khanmigo (Khan Academy)
ENTERPRISE SEARCH / PRODUCTIVITY
PROMPT
Students retain ownership of their content. Khan Academy is a nonprofit with strong privacy commitments.
OUTPUT
Not explicitly addressed. Educational outputs are treated as learning materials.
TRAINING
Policy text not extractable from cached files. Both khanmigo_tos.txt and khanmigo_privacy.txt are large HTML SPA shells (cdn.kastatic.org) that load policy content client-side; the 291KB files contain no embedded legal text. The canonical policy pages are at khanacademy.org/about/tos and khanacademy.org/about/privacy. Known facts: Khan Academy is a 501(c)(3) nonprofit; Khanmigo is powered by GPT-4 (OpenAI); Khan Academy has stated publicly that student data is not sold or used for advertising. COPPA and FERPA compliance are organizational commitments.
COMMERCIAL
Nonprofit educational service. No commercial use of user data.
152 verified findings across the displayed surfaces.
Empty Comparison Slot
AIRIN SUMMARY
GitHub Copilot carries highly permissive license terms; Khanmigo (Khan Academy) carries highly permissive license terms.FOR ENTERPRISE: GITHUB COPILOT NOT RECOMMENDED · KHANMIGO (KHAN ACADEMY) NOT RECOMMENDED
↳ Compliance surfaces · side by side
⚡ INTERACTIVE RISK COMPARISON HEATMAP
| RISK SURFACE | GITHUB COPILOT | KHANMIGO (KHAN ACADEMY) |
|---|---|---|
| PPrompt Ownership | ||
| OOutput Ownership | ||
| TModel Training | ||
| CCommercial Use | ||
| DData Privacy | ||
| $Tier Differences |
* Click any cell in the heatmap matrix to scroll directly to its verbatim policy citations below.
📂 Intellectual Property & Model Training
P
SURFACE 01
Prompt Ownership
GitHub Copilot
MEDHIGH
GitHub does not claim ownership over code inputs. Code submitted to Copilot remains the user's property.
“ “Input” means any content or context provided to an AI Feature, including prompts, attachments, code in your workspace, and conversation history.”
Khanmigo (Khan Academy)
MEDHIGH
Students retain ownership of their content. Khan Academy is a nonprofit with strong privacy commitments.
“The Services are owned and operated by Khan Academy. The visual interfaces, graphics, design, compilation, information, computer code (including source code or object code), software, services, content, educational videos and exercises, training materials, professional learning r…”
O
SURFACE 02
Output Ownership
GitHub Copilot
MEDHIGH
GitHub does not assert ownership over code suggestions. Users are responsible for determining the IP status of generated code.
“ You grant us and other Users the licenses in Sections D.4–D.8. These licenses apply to Your Content. If Your Content already includes a license granting us the permissions we need, no additional license is required. You will not receive payment for these rights. These licenses e…”
Khanmigo (Khan Academy)
MEDHIGH
Not explicitly addressed. Educational outputs are treated as learning materials.
“10.3.3. User-Generated Content. You (and your authorized Users) may provide input (including summary, text, instructions, or other content you make available) to any AI-Enabled Feature (“ **Input**”) and receive output (" **Output**") generated by any AI-Enabled Feature. Input an…”
T
SURFACE 03
Model Training
GitHub Copilot
MED⚠ CAUTIONHIGH
GitHub Privacy Statement confirms: 'Product Development and Improvement: We use Personal Data to develop and improve our products, services, and technologies, including artificial intelligence and machine learning technologies. This includes improving features, developing new offerings, enhancing safety and security capabilities, and training models. We apply appropriate technical safeguards, including aggregation and de-identification techniques where feasible.' Affiliates including Microsoft may also receive data for 'product development and improvement (including training and improving artificial intelligence and machine learning technologies).' Individual tier: code snippets and telemetry may be used for training (opt-out in IDE settings). Business/Enterprise: training on user code is off by default, no data retention beyond session.
“ The opt-out right described in this section applies solely to the use of your Inputs and Outputs as described in this section, and does not apply to the license granted in Sections D.4-D.8 or to any Content that does not constitute Input or Output (including Content stored in pu…”
Khanmigo (Khan Academy)
MEDHIGH
Policy text not extractable from cached files. Both khanmigo_tos.txt and khanmigo_privacy.txt are large HTML SPA shells (cdn.kastatic.org) that load policy content client-side; the 291KB files contain no embedded legal text. The canonical policy pages are at khanacademy.org/about/tos and khanacademy.org/about/privacy. Known facts: Khan Academy is a 501(c)(3) nonprofit; Khanmigo is powered by GPT-4 (OpenAI); Khan Academy has stated publicly that student data is not sold or used for advertising. COPPA and FERPA compliance are organizational commitments.
“By posting, submitting or distributing User Content on or through the Services, you hereby grant to Khan Academy a worldwide, non-exclusive, transferable, assignable, fully paid-up, sublicensable, royalty-free right and license to (a) host, transfer, display, perform, reproduce,…”
C
SURFACE 04
Commercial Use
GitHub Copilot
MED⚠ CAUTIONHIGH
Commercial use is the primary intended use case, particularly for Copilot for Business and Enterprise plans.
“ By using automated means to access, collect, or otherwise use (“Access”) any publicly accessible Content from the Service for the purpose of developing or training any commercially available artificial intelligence model, machine learning system, or similar technology (a "Commer…”
Khanmigo (Khan Academy)
MED⚠ CAUTIONHIGH
Nonprofit educational service. No commercial use of user data.
“● the sale of advertisements, sponsorships, or promotions placed on the Licensed Educational Content, or any part thereof, or the sale of advertisements, sponsorships, or promotions on any website or blog containing any part of the Licensed Educational Material, including without…”
📂 Data Privacy & Governance
D
SURFACE 05
Data Privacy
GitHub Copilot
MED⚠ CAUTIONHIGH
Individual: training on by default, opt-out available in IDE settings. Business: training off by default, no content retention. Enterprise: same as Business with additional enterprise governance and IP indemnification.
“ We aim to promptly respond to requests in compliance with legal requirements. Please note that we may retain certain data as necessary for legal obligations or for establishing, exercising, or defending legal claims.”
Khanmigo (Khan Academy)
MED⚠ CAUTIONHIGH
Khanmigo available via Khan Academy subscription ($9/month or annual). School/district plans (Khan Academy for Schools) may have separate data processing terms under FERPA.
“Parents (not Children) can modify or delete Child User accounts, as described in our [Children’s Privacy Notice](https://www.khanacademy.org/about/privacy-policy#childrens-privacy). Parents or school users who request to modify or delete School Accounts may be directed to the Sch…”
$
SURFACE 06
Tier Differences
GitHub Copilot
MEDHIGH
Individual: training on by default, opt-out available in IDE settings. Business: training off by default, no content retention. Enterprise: same as Business with additional enterprise governance and IP indemnification.
“ "Beta Previews" mean software, services, or features identified as alpha, beta, preview, early access, or evaluation, or words or phrases with similar meanings.”
Khanmigo (Khan Academy)
MED⚠ CAUTIONHIGH
Khanmigo available via Khan Academy subscription ($9/month or annual). School/district plans (Khan Academy for Schools) may have separate data processing terms under FERPA.
“Access to our Services may be subject to restrictions based on the User’s age and location, and certain features are limited to specific types of Users. By selecting a specific account type or feature, you confirm that you meet any applicable eligibility criteria. You are respons…”