Vendors

Does Xero’s JAX see your financial data? It is being built into core Xero workflows, so it is the AI surface over your accounts whether you engage with it or not.

How much of your writing does Grammarly see? More text than any other AI tool in your environment (email, drafts, chat, internal documents), which is the structural fact to weigh.

Is Adobe Firefly safe to use commercially? Its IP indemnification is real, but only eligible enterprise customers get it, and the training-data story behind the marketing is more complicated.

Does Canva train on your designs? On Free and Pro it does by default, with an easy opt-out. On Teams, Business and Enterprise, Canva states it does not use your content to improve its AI features, and the setting is locked off.

Does Shopify’s AI train on your store data? Shopify’s terms don’t say. A help page that promised not to use one merchant’s store-level data to power Magic for other merchants is no longer published. The features come with the plan you already pay for.

Does HubSpot’s Breeze AI train on your CRM data? HubSpot bars the AI providers it uses from training on your data. HubSpot itself does, by default: its terms let it train its own AI models on your customer data, and a Super Admin can switch that off without losing any AI features.

Is Salesforce’s AI safe from prompt injection? The Trust Layer is real, but a disclosed vulnerability showed that enterprise-grade governance has not solved indirect prompt injection.

Is Zendesk AI safe for customer data? Its generative features run on providers that cannot train on your data. Zendesk itself uses customer service data, after sanitising it, to train its own label-producing models.

Is Intercom Fin safe for customer conversations? Its model providers are bound by zero-retention, no-training terms, but Intercom’s own Terms, since 8 September 2026, let it use customer data for its own AI model training. Intercom says customers can ask to opt out.