JetBrains AI Pro and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No. JetBrains commits not to use inputs, data, outputs and suggestions to train code- or text-generating models unless the customer expressly agrees. Sharing of detailed code-related data is off by default.

Vendor's wording: “We will not use Your Inputs, Data, Outputs, and Suggestions to train any language models that generate code, text, or another type of data”

Source: jetbrains.comJetBrains AI Terms of Service, 5c Restriction on the use of Your Inputs, Data, Outputs, and Suggestions for the training of AI modelsSecond source: jetbrains.comChecked on 19 October 2026

No single default for JetBrains AI (the Privacy Notice says it may differ from the EU default). The Third-Party Services page lists AI provider locations: OpenAI, Anthropic, xAI US; Google EU, US and Asia; Baseten US/UK; Tavily US; Nebius France/Spain/US.

Vendor's wording: “your inputs and personal data may be shared with the listed AI subprocessors.”

Source: jetbrains.comC. AI and LLM services, AI service providers tableChecked on 19 October 2026

DPA in the terms.

Yes. The Data Processing Addendum is incorporated into the JetBrains AI Terms, and applies by placing an order; it includes EU standard contractual clauses.

Vendor's wording: “which is a part of (‘incorporated into’) these Terms.”

Source: jetbrains.comJetBrains AI Terms of Service, General terms, Personal DataChecked on 19 October 2026

Published.

Yes: JetBrains publishes its sub-processors at https://www.jetbrains.com/legal/docs/privacy/third-parties/ (25 rows: 9 hosting, 5 support/communication, 4 product-specific, 7 AI providers). AI providers: OpenAI, Google, Anthropic, xAI, Baseten, Tavily, Nebius.

Vendor's wording: “JetBrains considers these entities to be possible sub-processors of customers’ personal data in terms of the GDPR”

Source: jetbrains.comA. Third Parties and JetBrains Affiliates (Sub-Processors); C. AI and LLM servicesSecond source: jetbrains.comChecked on 19 October 2026

EU or Swiss vendor.

Not applicable (EU-based vendor, JetBrains s.r.o., Prague, Czech Republic)

Vendor's wording: “JetBrains s.r.o., a company registered in the Commercial Register of the Prague Municipal Court”

Source: jetbrains.com1. IntroductionChecked on 19 October 2026

No retention period for prompts is stated; the Terms say inputs and outputs can be stored for a limited period for security monitoring. After the DPA ends, JetBrains deletes or returns personal data within 90 days.

Vendor's wording: “return or delete Customer’s Personal Data, as applicable, within 90 days from the effective date of the termination or expiration of this DPA.”

Source: jetbrains.comSection 6 Return or Deletion of Customer’s Personal Data, 6.1Checked on 19 October 2026

Yes. An organisation admin can block or allow JetBrains AI for everyone in the organisation under Administration in the JetBrains Account (default is access allowed).

Vendor's wording: “In the JetBrains AI section of the Administration page, click the Block for everyone button to block access.”

Source: jb.ggEnable or disable JetBrains AI for all users in your organizationChecked on 19 October 2026