What your employer can see in your AI chats: Copilot, ChatGPT, Claude, Gemini

Checked November 2026. Every fact below links to the vendor’s own admin, help or trust page, and each tool has its own page with the details. Vendors change these pages often, so the sources are listed so you can recheck them. Where a vendor page is unclear or two pages disagree, this guide says so instead of guessing.

For the short version of this question, see can my employer see my AI chats.

The short answer

On a work account, the company’s administrators control the data, and all four vendors document some way for them to search, keep or export it. Your direct manager is normally not one of those administrators, but IT, security, legal and HR teams can be. On a personal account, the vendor’s own privacy settings apply, but your company’s device and network tools are a separate layer that none of the four vendors controls.

Side-by-side comparison

	Microsoft 365 Copilot	ChatGPT (Enterprise, Edu, Business)	Claude (Team, Enterprise)	Gemini (Google Workspace)
Can admins read chat content?	Yes. Prompts and responses are stored and admins can view them with Content search or Microsoft Purview.	Enterprise and Edu: yes, through the Compliance Platform, if a workspace owner grants the Conversation messages permission. Business: OpenAI’s pages point in different directions.	Enterprise: yes, through the Compliance API. Team and Enterprise: the Primary Owner can export organization data, which includes conversation data.	Yes, for the Gemini app. Admins can search and export prompts and responses with Vault.
Metadata and audit logs	Audit records show who, when and where, plus files and sites accessed.	Compliance Logs Platform: logs and metadata from the workspace.	Audit logs hold identifiers, not chat titles or content.	Not covered in the Vault pages read.
How long it is kept	Set by the company’s retention policy. Audit records: 180 days on Audit (Standard).	Enterprise and Edu: set by the workspace (indefinite or a fixed period). Compliance logs: 30 days.	Enterprise: indefinite by default, custom minimum 30 days. Audit log export: past 180 days.	Default 18 months; admin can pick 3, 18 or 36 months. Vault rules can run 1 to 36,500 days or indefinitely.
Legal hold and export	Yes, via eDiscovery (search, hold, review set, export).	Enterprise and Edu logs are built to feed eDiscovery, DLP and SIEM tools. Business owners can export a member’s data when the option is available.	Primary Owner data export; Enterprise Compliance API.	Vault holds, search and export.
User deletes a chat	Removed from the app, but a hold or retention policy can keep a compliance copy.	OpenAI schedules deletion within 30 days of a user deleting a saved chat, subject to workspace policy.	Removes it from visible history; backend retention is described separately.	Vault rules and holds take precedence over user settings.
Personal vs work account	Sign in with the work (Microsoft Entra) account for work Copilot Chat; personal Microsoft accounts are a separate experience.	A personal workspace is managed by you unless your organization has verified or claimed it.	Work accounts are managed by the Primary Owner. Free, Pro, Max and Ultra are separate consumer plans.	Personal-account activity is managed by you; work or school accounts are controlled by the Workspace admin.

Each cell is explained, with the exact wording of the source, on the tool’s own page:

• Microsoft 365 Copilot
• ChatGPT Enterprise, Business and Edu
• Claude Team and Enterprise
• Gemini for Google Workspace

Which account am I on?

Check this before you type. Each vendor shows it differently, and the cards below use only the cues the vendor documents.

Whichever account you are on, a company laptop and network are a separate layer, covered below.

Content versus metadata

The four vendors draw this line differently, and the difference matters.

• Microsoft: Microsoft says the stored data includes the user’s prompt and Copilot’s response, and that admins can use Content search or Microsoft Purview to view and manage it. The documented audit log properties list who, when, where and which files were accessed; Microsoft’s pages word what the audit log holds about prompt text differently, so the tool page covers both.
• OpenAI: the Compliance Platform exposes logs and metadata, and only a workspace owner can grant the Conversation messages permission.
• Anthropic: audit log exports do not include the title or content of chats, but the Enterprise Compliance API can pull chat data and Primary Owners can export conversations.
• Google: Vault can retain, hold, search and export prompts entered by users and responses generated by the Gemini app, but not media files or Gems attached to prompts.

Who counts as an “administrator”

None of the pages above describe a normal manager account that can read direct reports’ chats. The access sits with specific roles: Purview and eDiscovery roles at Microsoft, a workspace owner at OpenAI, the Primary Owner at Anthropic, and Vault-licensed admins at Google. A company can give those roles to anyone, so the practical question is who at your employer holds them, and under what process they are used.

Browser and network monitoring is a separate layer

Everything above is about data the AI vendor holds for your company. Your employer may also monitor devices and networks, which can apply to personal accounts too. The vendors’ own documents mention this only where they sell or support the tooling:

• Microsoft documents that Purview can warn or block users from sharing sensitive information with third-party generative AI sites accessed in a browser, and lists ChatGPT, Google Gemini and the consumer version of Microsoft Copilot as examples. For those sites it can also capture prompts and responses, but only with specific prerequisites: a collection policy set to capture content, onboarded devices and a browser extension, or a network integration.
• Anthropic documents Tenant Restrictions, where a company’s network proxy blocks sign-ins to any Claude organization that is not on its allowed list, “preventing unauthorized use of personal accounts” on corporate networks.

OpenAI and Google’s pages that we read do not describe what an employer’s own network or device tools can capture. Whether your company uses any of this is a question for your IT team.

What to do with this

1. Ask IT or your manager which AI tool your company licenses and which plan it is. The plan decides most of the table above.
2. Check whether you are signed in to the work account or a personal one before you start a chat, using the cards above. Each tool page ends with a “What to do” checklist for employees and one for admins: Copilot, ChatGPT, Claude, Gemini.
3. Read your company’s AI or acceptable-use policy. If there isn’t one, here is a template for a small-company AI policy.
4. Treat anything in a work account as something your company may be able to retrieve, and keep personal matters out of it.

Sources

All pages checked November 2026.

• Microsoft Learn, Data, Privacy, and Security for Microsoft Copilot: “To view and manage this stored data, admins can use Content search or Microsoft Purview.”
• Microsoft Learn, Audit logs for Copilot and AI applications: “These audit records contain details about which user interacted with Copilot, when the interaction took place, and where it occurred.”
• Microsoft Learn, Learn about auditing solutions in Microsoft Purview: “In Audit (Standard), the system retains records for 180 days.”
• Microsoft Learn, Learn about retention for Copilot and AI apps: “Messages visible in your AI apps are not an accurate reflection of whether they are retained or permanently deleted for compliance requirements.”
• Microsoft Learn, Purview data security and compliance protections for generative AI apps.
• Microsoft Learn, Purview for other AI apps: “Windows computers that are onboarded to Microsoft Purview can be configured for Endpoint data loss prevention (DLP) policies that warn or block users from sharing sensitive information with third-party generative AI sites that are accessed via a browser.”
• Microsoft Learn, Frequently asked questions about Copilot Chat: “instruct them to sign in with their Microsoft Entra account”.
• OpenAI Help Center, OpenAI Compliance Platform for Enterprise and Edu customers: “The Compliance Platform is available to ChatGPT Enterprise and Edu workspaces.”
• OpenAI Help Center, Data access for your managed ChatGPT account.
• OpenAI Help Center, Data retention when a member is removed from a workspace.
• OpenAI Help Center, Chat and file retention in ChatGPT.
• OpenAI Help Center, Managing data, sharing, and privacy in ChatGPT Business.
• Anthropic Help Center, Access the Compliance API and Access audit logs.
• Anthropic Help Center, Configure custom data retention controls for Enterprise plans, Export your organization’s data and Who owns and manages the data of my team?.
• Anthropic Help Center, Can you delete data that I sent via Team and Enterprise plans? and Enforce network-level access control with Tenant Restrictions.
• Google Workspace Admin Help, Retain Gemini app messages with Vault, Place Gemini app messages on hold, Search Gemini app messages in Vault, Supported services and data types and Turn the Gemini app on or off.
• Gemini Help, Manage & delete your activity in Gemini Apps.
• Microsoft Learn, Frequently asked questions about Copilot Chat (account cues and tenant restrictions): “These include a different background color for each account type, “Work” label under the user profile in the navigation pane, and the green data protection shield in their Microsoft Entra ID experience.”
• OpenAI Help Center, Data access for your managed ChatGPT account (read via r.jina.ai): “If you’re not sure who your administrator is, contact your IT or security team, or your organization’s help desk.”
• Anthropic Help Center, Move your personal Claude account to a Team or Enterprise organization (account switcher): “A blue checkmark shows which account you’re currently using.”
• Google Workspace Admin Help, Use Vault to search Gemini app: “Google Vault is for administrators and legal personnel.”