Your data and privacy

Grafana Assistant is an AI-powered observability companion available in Grafana Cloud. It helps you manage dashboards, troubleshoot issues, and run investigations across your observability data. To provide these capabilities, the Assistant collects and processes certain kinds of data and sometimes shares it with trusted third-party services. This page explains what information Grafana Assistant collects, how it protects that data, and how you can control it.

What data the Assistant collects

Grafana Assistant collects different types of information depending on how you use it. Most of this data comes from your conversations and interactions, while some relates to feedback and overall usage. Collecting this information helps the Assistant provide relevant responses, maintain context, and improve performance over time.

Conversation data

The Assistant records your prompts, its replies, and enough conversation history to maintain context across a thread. If you analyze dashboards, queries, or results, the Assistant may also capture those details so responses remain connected to what you are working on.

Investigation data

When you use Assistant Investigations, specialized AI agents collaborate across observability signals: metrics with Prometheus, logs with Loki, traces with Tempo, and profiles with Pyroscope. In these cases, the system also records the agents’ coordination, findings, and how they build a timeline of results.

Feedback data

Feedback helps us improve the Assistant’s usefulness and accuracy. This includes thumbs-up or thumbs-down ratings, written comments, and product interactions. The Assistant also records investigation feedback, such as whether explanations were accurate.

Usage and performance data

We observe overall usage and performance to understand how the Assistant is working in practice. This covers how often teams use features, whether users complete tutorials, how tools perform, and when errors occur. These signals help us identify issues and improve responsiveness.

Local browser storage

Your browser stores some preferences rather than Grafana Cloud. This includes which data sources you use most frequently and when you last accessed them. Local storage keeps suggestions relevant while keeping the information on your device.

How Grafana Assistant protects and uses your data

Grafana Cloud encrypts all data transmitted between your browser and its services and stores that information securely with access restricted to authorized team members. The Assistant only sends the minimum details required to generate an answer, and it always routes requests through Grafana Cloud rather than making direct calls from your browser. The Assistant also respects your Grafana permissions: if you can’t view a dashboard or dataset, neither can it.

We make three privacy commitments:

Data ownership: You retain ownership of your data.
No business data training: We never use your organization’s data to train AI models or for marketing.
No third-party retention: Anthropic and Google (Vertex AI) process your prompts without storing or training on them, and Tavily keeps zero-day retention under our enterprise agreement. Grafana Cloud securely retains conversation data so the Assistant can stay useful and improve.

Third-party services

Grafana Assistant integrates with a small number of trusted third-party services. These services process language, provide web search, or connect external tools, but we share only the minimal data they need.

Large language models

The Assistant uses Anthropic’s Claude models, either through Anthropic directly or via Google’s Vertex AI platform. When a request is made, we transmit your question along with the minimal conversation history and context needed to generate a response. Anthropic and Google act as sub-processors under Grafana’s enterprise agreements, and we configure both providers with zero retention so your prompts and responses are not stored or used for training.

Web search

For external information, the Assistant can search the web using Tavily. In this case, the Assistant transmits only your search terms and a small amount of context. The Assistant doesn’t share sensitive business data, and Tavily processes data under our enterprise agreement with zero-day retention.

MCP servers

You can connect Model Context Protocol (MCP) servers to extend the Assistant with additional tools or integrations. When you call an MCP server, the Assistant sends your query, relevant context, and authentication details if configured. We monitor performance signals such as response times and error rates, but you remain in control of which servers stay connected.

OAuth integrations

The Assistant can use OAuth to connect to MCP servers such as GitHub, Google, or Microsoft. OAuth is a secure authorization process that exchanges only authorization codes, access tokens, and the minimal identity details the service requires. Each provider applies its own privacy policy to this information.

Your privacy controls

You control how your data and integrations operate. Within the Assistant, you can review your past conversations, delete them individually or in bulk, and decide whether or not to provide ratings and comments. Where supported, you can also opt out of usage tracking.

For integrations, you can connect or disconnect MCP servers, link or unlink OAuth services, and adjust permissions. You can revoke access at any time through your Grafana Assistant settings.

Best practices

You can strengthen your privacy when using Grafana Assistant by following these practices:

Regularly review and delete old conversation history you no longer need.
Only connect MCP servers from trusted providers and with the minimum permissions required.
Be mindful about including sensitive business data in Assistant conversations.
Review and revoke OAuth integrations you no longer use.
Opt out of optional usage tracking where available if you prefer less data collection.

For related guidance on protecting your environment, see the best practices section in the security documentation.

Getting help

If you have questions about privacy or want to exercise your data rights:

General privacy questions: Contact Grafana Support with “Privacy” in the subject line.
Report concerns: Use Grafana’s security disclosure process.
Compliance inquiries: Review our legal and security webpage or contact your Grafana account team.

We update this page as Grafana Assistant evolves and notify you of significant changes through Grafana Cloud notifications.