Security and dataSeptember 24, 2026•5 min read

What does it really mean that AI does not train on your code?

The phrase "we do not train on your data" does not by itself describe all the handling of a request. It is worth reviewing what data the commitment covers, what it is processed for, and what retention exceptions apply.

Direct answer: what does EjectorSeat's integrated provider say?

EjectorSeat uses an integrated development model served by DeepInfra. Its terms state that DeepInfra does not sell customer data or use it to train, tune, or improve models, except when necessary to provide the service. The clause also allows for specific exceptions; for that reason, it does not amount to promising absolute zero retention. Read the DeepInfra terms.

What the DeepInfra terms cover

DeepInfra's current terms indicate that the provider does not sell customer data or use it to train, tune, or improve models, except when necessary to provide the service. The obligation refers to the inference provider integrated into EjectorSeat.

The same clause describes exceptions: retention authorized in writing for support, operational metadata that does not include the content of the request, and records that must be kept by law or to address fraud, security, or abuse. Therefore, it should not be summarized as a guarantee that no data is ever stored.

Review the DeepInfra terms directly (section 7) and confirm that the current version and the applicable agreement cover your case.

The commitment does not replace your controls

The commitment on training does not mean that EjectorSeat filters secrets, deletes personal data, or processes requests within the customer infrastructure. The current product does not offer DLP, deployment in the customer VPC, or air-gapped operation.

Before enabling a code assistant, define what context your developers can share, apply your internal secret-handling policies, and review the provider's contract and exceptions.

Tivisoft also offers enterprise solutions for assistants on your own infrastructure. That offering is distinct from EjectorSeat and requires discussing its scope with the team.

Checklist for the CISO before authorizing AI tools

Which provider processes the requests and what contractual commitment do they publish?
What retention and support exceptions does the current agreement allow for?
What data and context can developers send from the plugin?
Do we have our own controls to avoid sharing secrets in the context?
Questions and answers

Frequently asked questions

Direct, technical answers about EjectorSeat and enterprise AI architecture.

What no-training commitment applies to EjectorSeat?

EjectorSeat uses the integrated development model served by DeepInfra. In its terms, DeepInfra states that it does not sell customer data or use it to train, tune, or improve models, except when necessary to provide the service. Review the official terms at https://deepinfra.com/terms.

Does this mean no data is retained at all?

It should not be interpreted as an absolute absence of retention. DeepInfra's terms allow for data authorized in writing to resolve support incidents (which is deleted within 30 days of their resolution), operational metadata without content, and records that must be kept by law or to investigate fraud, security incidents, or abuse.

Does EjectorSeat offer DLP or deployment in the customer VPC?

No. The current product does not offer DLP scanning of secrets, deployment in the customer VPC, or an air-gapped mode. Tivisoft separately offers enterprise solutions for your own infrastructure; their scope should be discussed with the team.

Managed access · Built-in model · FinOps

Review the data handling of your code assistant

Review the DeepInfra terms and talk to Tivisoft about your organization's security requirements.

Talk to a Security ExpertSee Security Measures