Turn this comparison into procurement-ready diligence
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
SIDE-BY-SIDE · 2 OF 3
Two platforms.
Same questions.
GitHub Copilot
DEVELOPER / CODING
PROMPT
GitHub does not claim ownership over code inputs. Code submitted to Copilot remains the user's property.
OUTPUT
GitHub does not assert ownership over code suggestions. Users are responsible for determining the IP status of generated code.
TRAINING
GitHub Privacy Statement confirms: 'Product Development and Improvement: We use Personal Data to develop and improve our products, services, and technologies, including artificial intelligence and machine learning technologies. This includes improving features, developing new offerings, enhancing safety and security capabilities, and training models. We apply appropriate technical safeguards, including aggregation and de-identification techniques where feasible.' Affiliates including Microsoft may also receive data for 'product development and improvement (including training and improving artificial intelligence and machine learning technologies).' Individual tier: code snippets and telemetry may be used for training (opt-out in IDE settings). Business/Enterprise: training on user code is off by default, no data retention beyond session.
COMMERCIAL
Commercial use is the primary intended use case, particularly for Copilot for Business and Enterprise plans.
280 verified findings across the displayed surfaces.
Khanmigo (Khan Academy)
ENTERPRISE SEARCH / PRODUCTIVITY
PROMPT
Students retain ownership of their content. Khan Academy is a nonprofit with strong privacy commitments.
OUTPUT
Not explicitly addressed. Educational outputs are treated as learning materials.
TRAINING
Policy text not extractable from cached files. Both khanmigo_tos.txt and khanmigo_privacy.txt are large HTML SPA shells (cdn.kastatic.org) that load policy content client-side; the 291KB files contain no embedded legal text. The canonical policy pages are at khanacademy.org/about/tos and khanacademy.org/about/privacy. Known facts: Khan Academy is a 501(c)(3) nonprofit; Khanmigo is powered by GPT-4 (OpenAI); Khan Academy has stated publicly that student data is not sold or used for advertising. COPPA and FERPA compliance are organizational commitments.
COMMERCIAL
Nonprofit educational service. No commercial use of user data.
208 verified findings across the displayed surfaces.
Empty Comparison Slot
AIRIN SUMMARY
GitHub Copilot carries highly permissive license terms; Khanmigo (Khan Academy) carries highly permissive license terms.FOR ENTERPRISE: GITHUB COPILOT NOT RECOMMENDED · KHANMIGO (KHAN ACADEMY) NOT RECOMMENDED
↳ Compliance surfaces · side by side
⚡ INTERACTIVE RISK COMPARISON HEATMAP
| RISK SURFACE | GITHUB COPILOT | KHANMIGO (KHAN ACADEMY) |
|---|---|---|
| PPrompt Ownership | ||
| OOutput Ownership | ||
| TModel Training | ||
| CCommercial Use | ||
| DData Privacy | ||
| $Tier Differences |
* Click any cell in the heatmap matrix to scroll directly to its verbatim policy citations below.
📂 Intellectual Property & Model Training
P
SURFACE 01
Prompt Ownership
GitHub Copilot
MEDHIGH
GitHub does not claim ownership over code inputs. Code submitted to Copilot remains the user's property.
“ Short version: We own the service and all of our content. In order for you to use our content, we give you certain rights to it, but you may only use our content in the way we have allowed. ”
Khanmigo (Khan Academy)
MEDHIGH
Students retain ownership of their content. Khan Academy is a nonprofit with strong privacy commitments.
“You acknowledge that you are solely responsible for your User Content and the consequences of posting, creating, or publishing such User Content. For clarity, AI Content is User Content. See Section 10 (Specific Account Functionality; AI-Enabled Features) for additional terms rel…”
O
SURFACE 02
Output Ownership
GitHub Copilot
MEDHIGH
GitHub does not assert ownership over code suggestions. Users are responsible for determining the IP status of generated code.
“ You grant us and other Users the licenses in Sections D.4–D.8. These licenses apply to Your Content. If Your Content already includes a license granting us the permissions we need, no additional license is required. You will not receive payment for these rights. These licenses e…”
Khanmigo (Khan Academy)
MEDHIGH
Not explicitly addressed. Educational outputs are treated as learning materials.
“10.3.3. User-Generated Content. You (and your authorized Users) may provide input (including summary, text, instructions, or other content you make available) to any AI-Enabled Feature (“ **Input**”) and receive output (" **Output**") generated by any AI-Enabled Feature. Input an…”
T
SURFACE 03
Model Training
GitHub Copilot
MED⚠ CAUTIONHIGH
GitHub Privacy Statement confirms: 'Product Development and Improvement: We use Personal Data to develop and improve our products, services, and technologies, including artificial intelligence and machine learning technologies. This includes improving features, developing new offerings, enhancing safety and security capabilities, and training models. We apply appropriate technical safeguards, including aggregation and de-identification techniques where feasible.' Affiliates including Microsoft may also receive data for 'product development and improvement (including training and improving artificial intelligence and machine learning technologies).' Individual tier: code snippets and telemetry may be used for training (opt-out in IDE settings). Business/Enterprise: training on user code is off by default, no data retention beyond session.
“ Unless you opt out, GitHub's Affiliates may use your Inputs and Outputs under this license in accordance with their applicable privacy and contractual obligations. This license does not, however, permit GitHub or its Affiliates to share your Inputs or Outputs with third-par…”
Khanmigo (Khan Academy)
MEDHIGH
Policy text not extractable from cached files. Both khanmigo_tos.txt and khanmigo_privacy.txt are large HTML SPA shells (cdn.kastatic.org) that load policy content client-side; the 291KB files contain no embedded legal text. The canonical policy pages are at khanacademy.org/about/tos and khanacademy.org/about/privacy. Known facts: Khan Academy is a 501(c)(3) nonprofit; Khanmigo is powered by GPT-4 (OpenAI); Khan Academy has stated publicly that student data is not sold or used for advertising. COPPA and FERPA compliance are organizational commitments.
“By posting, submitting or distributing User Content on or through the Services, you hereby grant to Khan Academy a worldwide, non-exclusive, transferable, assignable, fully paid-up, sublicensable, royalty-free right and license to (a) host, transfer, display, perform, reproduce,…”
C
SURFACE 04
Commercial Use
GitHub Copilot
MED⚠ CAUTIONHIGH
Commercial use is the primary intended use case, particularly for Copilot for Business and Enterprise plans.
“ By using automated means to access, collect, or otherwise use (“Access”) any publicly accessible Content from the Service for the purpose of developing or training any commercially available artificial intelligence model, machine learning system, or similar technology (a "Commer…”
Khanmigo (Khan Academy)
MED⚠ CAUTIONHIGH
Nonprofit educational service. No commercial use of user data.
“● the sale or rental of (1) any part of the Licensed Educational Content, (2) any derivative works based at least in part on the Licensed Educational Content, or (3) any collective work that includes any part of the Licensed Educational Content;”
📂 Data Privacy & Governance
D
SURFACE 05
Data Privacy
GitHub Copilot
MED⚠ CAUTIONHIGH
Individual: training on by default, opt-out available in IDE settings. Business: training off by default, no content retention. Enterprise: same as Business with additional enterprise governance and IP indemnification.
“ The business or commercial purpose of sharing personal information is to assist us with marketing, advertising, and audience measurement.”
Khanmigo (Khan Academy)
MED⚠ CAUTIONHIGH
Khanmigo available via Khan Academy subscription ($9/month or annual). School/district plans (Khan Academy for Schools) may have separate data processing terms under FERPA.
“Parents (not Children) can modify or delete Child User accounts, as described in our [Children’s Privacy Notice](https://www.khanacademy.org/about/privacy-policy#childrens-privacy). Parents or school users who request to modify or delete School Accounts may be directed to the Sch…”
$
SURFACE 06
Tier Differences
GitHub Copilot
MEDHIGH
Individual: training on by default, opt-out available in IDE settings. Business: training off by default, no content retention. Enterprise: same as Business with additional enterprise governance and IP indemnification.
“ "Beta Previews" mean software, services, or features identified as alpha, beta, preview, early access, or evaluation, or words or phrases with similar meanings.”
Khanmigo (Khan Academy)
MED⚠ CAUTIONHIGH
Khanmigo available via Khan Academy subscription ($9/month or annual). School/district plans (Khan Academy for Schools) may have separate data processing terms under FERPA.
“Access to our Services may be subject to restrictions based on the User’s age and location, and certain features are limited to specific types of Users. By selecting a specific account type or feature, you confirm that you meet any applicable eligibility criteria. You are respons…”