Is Glean safe with your data?

No training on the model-provider leg

Customer data sent to Azure OpenAI or OpenAI under Glean's own key will not be used to inform or train those providers' models, and Glean states it negotiated zero-day retention for that leg. Both commitments are tied to Glean's key; if a customer brings their own model key, Glean disclaims any guarantee on retention or training.

Perpetual licence over user submissions

The website terms take a worldwide, perpetual, irrevocable, sublicensable and transferable licence to use, modify, reproduce, distribute and prepare derivative works of anything posted to the Site, including for promotion and redistribution through third-party channels.

No retention period for Glean's own data

The privacy statement keeps Personal Information only as long as necessary without naming any period. A seven-day tenant wipe is named, but only for customers on the hosted single-tenant deployment after termination.

Gaps in security and sharing disclosure

Safeguards are described only as physical, administrative and technical, with no encryption, access-control or certification named. There is no breach-notification commitment, no sub-processor list or DPA reference, and the US-default California rights list omits data portability.