---
title: "Privacy and security | Grafana Labs"
description: "How Grafana Assistant handles your data, which providers it uses, and how RBAC controls access"
---

> For a curated documentation index, see [llms.txt](/llms.txt). For the complete documentation index, see [llms-full.txt](/llms-full.txt).

## Review how Assistant handles your data

Grafana Assistant processes your prompts and conversation context using third-party AI providers. Requests route through Grafana Cloud and never go directly from your browser to third parties.

Grafana Labs makes three commitments:

- **Data ownership**: You retain ownership of your data.
- **No training on your data**: Grafana Labs never uses your organization’s data to train AI models or for marketing.
- **No third-party retention**: Providers process your prompts without storing or training on them.

## Review the providers Assistant uses

Assistant uses different providers depending on the feature and the type of request.

| Feature                     | Providers                                      | Provider data retention | Training on your data |
|-----------------------------|------------------------------------------------|-------------------------|-----------------------|
| Chat                        | Anthropic, Google Vertex AI, or Amazon Bedrock | Zero retention          | No                    |
| Web search (used on demand) | Tavily                                         | Zero-day retention      | No                    |

Zero-day retention means Tavily doesn’t retain search terms after the day they’re processed.

Grafana selects the provider based on infrastructure configuration. You can’t choose which provider processes your requests.

## Configure RBAC and access controls

The Assistant respects your Grafana permissions. If you don’t have access to a dashboard or data source, the Assistant can’t access it either.

Administrators can use RBAC to control who can open Assistant by scoping `plugins.app:access` to `plugins:id:grafana-assistant-app`. Refer to [Manage Assistant access with RBAC](/docs/grafana-cloud/machine-learning/assistant/privacy-and-security/rbac/) for instructions.

## Review when data leaves your environment

Assistant is not enabled by default. You don’t send data to any AI provider until you actively use an Assistant feature. Enabling the plugin in the Plugins catalog doesn’t send any data.

For full details on data handling, encryption, and access controls, refer to [Manage your data privacy and security](/docs/grafana-cloud/machine-learning/assistant/privacy-and-security/).