AI tool summary for DPOs and governors
GitHub Copilot (Student)
GitHub (Microsoft) · Facts last checked 2026-10-23 · Printed 23 October 2026
AI Prefect
Staff: Amber · Use with caution
- Doesn’t say if it is a processor or controller
- Doesn’t say where data is stored
- No school DPA found
Pupils: Amber · Use with caution
- Doesn’t say if it is a processor or controller
- Doesn’t say where data is stored
- No school DPA found
| Supplier | GitHub (Microsoft) |
|---|---|
| Category | coding assistant |
| Pupil-facing | yes - verified students |
| Processor or controller | not stated |
| Where data is stored | not stated |
| Trains AI models on inputs | no for GitHub Education student access (excluded from the April 2026 training change); individual Free/Pro users are opted in unless they opt out |
| How long inputs are kept | IDE completion prompts discarded after suggestion; chat prompts generally kept 28 days |
| Data processing agreement (DPA) | not stated |
| Signs individual DPAs with schools | not stated |
| UK GDPR representative / DPO | not stated |
| Minimum age | not stated |
| Key safety note | not stated |
| Main use | Coding assistant |
Before using it: check the minimum age fits your pupils, confirm a data processing agreement is in place, switch off AI training where possible, and record the decision in your DPIA.
Sources: https://docs.github.com/en/copilot/get-started/plans · https://github.blog/news-insights/company-news/updates-to-github-copilot-interaction-data-usage-policy/
Full entry: aiprefect.co.uk/tools/github-copilot. Rating is a rules-based summary of the supplier’s published terms. “Not stated” means we could not find it in their documents. This is not legal advice and does not replace your DPIA.