AI tool summary for DPOs and governors
Grok
xAI (SpaceXAI LLC) · Facts last checked 2026-10-23 · Printed 23 October 2026
AI Prefect
Staff: Red · Not recommended for school data
- Trains on what you type by default, with no school-level opt-out stated
- Supplier acts as a data controller, not a processor for the school
Pupils: Red · Not recommended for school data
- Trains on what you type by default, with no school-level opt-out stated
- Supplier acts as a data controller, not a processor for the school
- Supplier says it is not for pupils
| Supplier | xAI (SpaceXAI LLC) |
|---|---|
| Category | general chatbot |
| Pupil-facing | no (13-17 only with parent/guardian agreement) |
| Processor or controller | controller (consumer service) |
| Where data is stored | not stated |
| Trains AI models on inputs | YES by default for logged-in users (opt-out: Settings > Data Controls > Improve the model); Private Chat not used |
| How long inputs are kept | Private Chat and deleted content: up to 30 days |
| Data processing agreement (DPA) | not stated |
| Signs individual DPAs with schools | not stated |
| UK GDPR representative / DPO | Europe Privacy Policy Addendum referenced (details not captured) |
| Minimum age | 13+; 13-17 need parent/guardian permission |
| Key safety note | supplier says some modes may produce sexual, violent or coarse content; Grok inside X is governed by X's policy |
| Main use | General AI assistant / chatbot |
Better-rated alternatives for the same use: ChatGPT Edu (Green), Gemini app (Workspace for Education) (Green), Microsoft 365 Copilot (Green)
Before using it: check the minimum age fits your pupils, confirm a data processing agreement is in place, switch off AI training where possible, and record the decision in your DPIA.
Sources: https://x.ai/legal/terms-of-service · https://x.ai/legal/faq · https://x.ai/legal/privacy-policy
Full entry: aiprefect.co.uk/tools/grok. Rating is a rules-based summary of the supplier’s published terms. “Not stated” means we could not find it in their documents. This is not legal advice and does not replace your DPIA.