your attorneys practice law. Prest0n does the rest.

a federal court has held that a client’s own chats with an AI app were not privileged. here is what courts and the bar have said, and how Prest0n compares, question by question.

what the rules say about AI, for law

each in its own words, quoted in the sources below.

a federal court, February 2026: a defendant’s own exchanges with Claude were protected by neither the attorney-client privilege nor the work product doctrine: Claude is not an attorney, and the privacy policy its users accept lets Anthropic train on their inputs and disclose them to third parties, regulators included.
the same court, on waiver: sharing privileged information with Claude and Anthropic waived the privilege, as sharing it with any other third party would; had counsel directed the work, the court said, the AI might arguably have acted as a lawyer’s agent within the privilege.
a federal court, January 2026: upheld orders that OpenAI produce 20 million de-identified ChatGPT output logs in copyright litigation, with users’ privacy protected by sampling, de-identification and a protective order.
the State Bar of California, 2026: a lawyer must not put a client’s confidential information into a generative AI tool that may present material risks to confidentiality or security without the client’s informed consent, nor deploy an agentic AI system that sends client information out on its own without appropriate safeguards and human review.

Prest0n and Claude, for law

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. Claude: on Free, Pro and Max you choose whether your chats train its models (kept five years if you allow it, 30 days if not); its commercial products are not used for training by default.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. Claude: before Claude Duet sends a message, makes a payment, signs a document or deletes anything, it shows you what it is about to do and waits for your approval.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. Claude: a few things are off-limits even with your approval, like trading securities or moving money between accounts.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. Claude: you, task by task: its task list shows what Claude Duet has done and is doing, and you can steer it mid-task.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. Claude: Claude Duet: a research preview for subscribers on Pro, Max and Ultra plans in the US, through a waitlist.

Prest0n and ChatGPT, for law

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. ChatGPT: on personal plans, content is used to train its models, with an opt-out in settings; Business, Enterprise and Edu workspace data is not used for training by default.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. ChatGPT: ChatGPT can request a separate confirmation before actions that could create a financial, legal, account or other consequential commitment.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. ChatGPT: ChatGPT Work gathers context, makes a plan and checks in when judgment or approval matters; cloud execution runs supported steps on OpenAI-managed infrastructure.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. ChatGPT: you, site by site: by default it asks before visiting a new website, and allowing a website doesn’t approve every action there.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. ChatGPT: ChatGPT Work: you give it a goal, and schedule one-time or recurring tasks for yourself.

Prest0n and Muse, for law

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. Muse: your interactions help train Meta’s AI models by default, a default Meta calls good; you can opt out with a switch in Muse settings.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. Muse: Muse checks with the person before sensitive actions like sending an email or making a purchase.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. Muse: Muse for Small Business: you approve before anything publishes, sends or spends, and you can undo it.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. Muse: you, at any point: its computer has a full browser that you and your agent can use, and you can step in whenever you like.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. Muse: one person: Muse is a personal AI agent that completes tasks on your behalf.

Prest0n and OpenAI dots, for law

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. OpenAI dots: a personal dot follows your ChatGPT data controls; Enterprise data is not used to train models by default.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. OpenAI dots: before an action affects your accounts or shares information, a review decides whether your dot proceeds, needs your approval or hands the step to you.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. OpenAI dots: a dot can make mistakes, and stopping a task doesn’t undo actions it has already completed; removing access does not reverse them either.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. OpenAI dots: workspace admins choose who can use dots, configure their capabilities and can pause a dot; each member chooses whether to create one.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. OpenAI dots: one member each: a dot is a personal agent, and each member chooses whether to create one.

Prest0n and Instinct, for law

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. Instinct: its terms let it use your materials to train AI models unless you opt out; what you add to its Vault is used only to provide the service to you.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. Instinct: its terms say it may add confirmation requirements on certain actions, with no promise that they will prevent unintended ones.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. Instinct: its terms appoint it as your agent to enter into agreements, commitments or transactions for you, binding on you as if you entered them yourself; its maker is not responsible for unintended actions.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. Instinct: its terms authorize it to take the actions it deems responsive to what you ask.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. Instinct: one person: its terms permit it for your personal use only.

Prest0n and Grok Bot, for law

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. Grok Bot: it follows your Cursor account’s data settings: with Privacy Mode on, customer data is not used for training.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. Grok Bot: it depends on the tool, the risk of the action and your Auto-review rules: most actions run on their own, and an email you ask for in chat goes out once Auto Review allows it.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. Grok Bot: an approval controls the proposed action; it does not reverse work already completed.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. Grok Bot: your rules and a review model: Ask first rules always stop matching actions, and Auto Review is on by default.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. Grok Bot: each member, on their own Cursor account: on a self-serve Cursor Teams plan, every member gets Grok Bot.

always with your people

what waits for a person is up to you. what the field reserves for its people stays with them, always.

no legal advice.
no filing with a court or agency, and never the final submit on an e-filing portal.
no signing.
attorneys review the work and make every decision.

runs on its own, as far as you allow

contract review against your playbook
legal research to advice
meetings and case strategy
business development
personal-injury demand, records to letter

you decide how much it does

nothing runs without your permission. anything runs with it. as much or as little of the work as you choose: for you, and for your team. by default, anything that leaves your firm waits for the person accountable for it; only that person or your workspace can choose to send a kind without asking.

what it means for everyone at the table

one Prest0n employee, and what it changes for each person deciding.

managing partners: more matters with the team you have, without new hires.
attorneys: the legal calls stay yours; how much else you review is your choice.
intake and paralegals: leads called back and summarized in English or Spanish; first drafts done.
firm administrators: every workflow on its own schedule, every governed action on record.
IT and security: permissions per person, checked on every message; passwords typed by you.
risk and ethics: advice, signing and filing stay with attorneys; by default, nothing leaves without a person.

sources

every statement about another product rests on its maker’s own published words, and every rule on a court’s, a regulator’s or the law’s own text, each quoted below with the day it was read.

U.S. District Court, S.D.N.Y.: Memorandum, United States v. Heppner (United States v. Heppner, No. 25 Cr. 503 (JSR), ECF No. 27, at 1 (S.D.N.Y. Feb. 17, 2026)), https://storage.courtlistener.com/recap/gov.uscourts.nysd.652138/gov.uscourts.nysd.652138.27.0.pdf: “granted from the bench the Government’s motion for a ruling that certain written exchanges that defendant Bradley Heppner had with a generative artificial intelligence (“AI”) platform were not protected from Government inspection by either the attorney-client privilege or the work product doctrine.” (read 6 November 2026)
U.S. District Court, S.D.N.Y.: Memorandum, United States v. Heppner (United States v. Heppner, No. 25 Cr. 503 (JSR), ECF No. 27, at 5 (S.D.N.Y. Feb. 17, 2026)), https://storage.courtlistener.com/recap/gov.uscourts.nysd.652138/gov.uscourts.nysd.652138.27.0.pdf: “Because Claude is not an attorney, see ECF No. 23-6, that alone disposes of Heppner’s claim of privilege.” (read 6 November 2026)
U.S. District Court, S.D.N.Y.: Memorandum, United States v. Heppner (United States v. Heppner, No. 25 Cr. 503 (JSR), ECF No. 27, at 6 (S.D.N.Y. Feb. 17, 2026)), https://storage.courtlistener.com/recap/gov.uscourts.nysd.652138/gov.uscourts.nysd.652138.27.0.pdf: “the written privacy policy to which users of Claude consent provides that Anthropic collects data on both users’ “inputs” and Claude’s “outputs,” that it uses such data to “train” Claude, and that Anthropic reserves the right to disclose such data to a host of “third parties,” including “governmental regulatory authorities.”” (read 6 November 2026)
U.S. District Court, S.D.N.Y.: Memorandum, United States v. Heppner (United States v. Heppner, No. 25 Cr. 503 (JSR), ECF No. 27, at 8 n.3 (S.D.N.Y. Feb. 17, 2026)), https://storage.courtlistener.com/recap/gov.uscourts.nysd.652138/gov.uscourts.nysd.652138.27.0.pdf: “But even if certain information that Heppner input into Claude was privileged, he waived the privilege by sharing that information with Claude and Anthropic, just as if he had shared it with any other third party.” (read 6 November 2026)
U.S. District Court, S.D.N.Y.: Memorandum, United States v. Heppner (United States v. Heppner, No. 25 Cr. 503 (JSR), ECF No. 27, at 7 (S.D.N.Y. Feb. 17, 2026)), https://storage.courtlistener.com/recap/gov.uscourts.nysd.652138/gov.uscourts.nysd.652138.27.0.pdf: “Had counsel directed Heppner to use Claude, Claude might arguably be said to have functioned in a manner akin to a highly trained professional who may act as a lawyer’s agent within the protection of the attorney-client privilege.” (read 6 November 2026)
U.S. District Court, S.D.N.Y.: Order, In re OpenAI, Inc. Copyright Infringement Litigation (In re OpenAI, Inc. Copyright Infringement Litig., No. 25-md-3143 (SHS) (OTW), ECF No. 1021, at 4 (S.D.N.Y. Jan. 5, 2026)), https://storage.courtlistener.com/recap/gov.uscourts.nysd.640396/gov.uscourts.nysd.640396.1021.0.pdf: “Accordingly, OpenAI’s objections are denied and Judge Wang’s orders are affirmed.” (read 6 November 2026)
U.S. District Court, S.D.N.Y.: Order, In re OpenAI, Inc. Copyright Infringement Litigation (In re OpenAI, Inc. Copyright Infringement Litig., No. 25-md-3143 (SHS) (OTW), ECF No. 1021, at 2 (S.D.N.Y. Jan. 5, 2026)), https://storage.courtlistener.com/recap/gov.uscourts.nysd.640396/gov.uscourts.nysd.640396.1021.0.pdf: “She also found that ChatGPT users’ “sincere” privacy interests were “one factor in the proportionality analysis” but that these privacy interests were adequately protected by (1) “reducing the total output logs subject to discovery from tens of billions to 20 million,” (2) OpenAI’s de-identification of the 20 million log sample, and (3) the existing protective order in this case.” (read 6 November 2026)
State Bar of California: Practical Guidance for the Use of Generative Artificial Intelligence in the Practice of Law (State Bar of Cal., Standing Comm. on Prof. Responsibility and Conduct, Practical Guidance for the Use of Generative AI in the Practice of Law (2026), at 5), https://www.calbar.ca.gov/Portals/0/documents/ethics/Generative-AI-Practical-Guidance.pdf: “As a general matter, a lawyer must not input any confidential information of the client into a generative AI solution that may present material risks to confidentiality or security, absent informed client consent (see rule 1.0.1(e)) as to the underlying risks.” (read 6 November 2026)
State Bar of California: Practical Guidance for the Use of Generative Artificial Intelligence in the Practice of Law (State Bar of Cal., Standing Comm. on Prof. Responsibility and Conduct, Practical Guidance for the Use of Generative AI in the Practice of Law (2026), at 6), https://www.calbar.ca.gov/Portals/0/documents/ethics/Generative-AI-Practical-Guidance.pdf: “A lawyer must not deploy an agentic AI system in a manner that permits autonomous external transmission of client information, including automated communications, filings, or data transfers, without appropriate safeguards and human review.” (read 6 November 2026)
Anthropic: Updates to Consumer Terms and Privacy Policy, https://www.anthropic.com/news/updates-to-our-consumer-terms: “We will train new models using data from Free, Pro, and Max accounts when this setting is on (including when you use Claude Code from these accounts).” (read 6 November 2026)
Anthropic: Updates to Consumer Terms and Privacy Policy, https://www.anthropic.com/news/updates-to-our-consumer-terms: “We are also expanding our data retention period to five years if you allow us to use your data for model improvement, with this setting only applying to new or resumed chats and coding sessions. If you don't choose this option, you will continue with our existing 30-day data retention period.” (read 6 November 2026)
Anthropic: Is my data used for model training?, https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training: “By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models.” (read 6 November 2026)
Anthropic: Introducing Claude Duet, https://claude.com/resources/articles/claude-duet: “But before it sends a message, makes a payment, signs a document, or deletes anything, it shows you exactly what it’s about to do and waits for your approval.” (read 6 November 2026)
Anthropic: Introducing Claude Duet, https://claude.com/resources/articles/claude-duet: “A few things are off-limits even with your approval, like trading securities or moving money between accounts.” (read 6 November 2026)
Anthropic: Claude Duet Safety, Privacy, and Security, https://claude.com/resources/articles/claude-duet-safety-privacy-and-security: “You can see what Claude Duet has done and is doing in its task list, where each task has its own page, and steer it mid-task.” (read 6 November 2026)
Anthropic: Get started with Claude Duet, https://support.claude.com/en/articles/17631495-get-started-with-claude-duet: “Claude Duet is available as a research preview to users on Pro, Max, and Ultra plans in the US, through a waitlist.” (read 6 November 2026)
OpenAI: Plans and Pricing, https://chatgpt.com/pricing/: “Plan: Free, Feature: Content is used to train our models, Opt-out available” (read 6 November 2026)
OpenAI: Plugins in ChatGPT, https://chatgpt.com/features/plugins/: “Plus and Pro users can manage data-use preferences in their settings” (read 6 November 2026)
OpenAI: ChatGPT Work cloud security, https://learn.chatgpt.com/docs/enterprise/chatgpt-work-cloud-security: “Business, Enterprise, and Edu workspace data is encrypted in transit and at rest and is not used to train OpenAI models by default.” (read 6 November 2026)
OpenAI: ChatGPT Work Overview, https://learn.chatgpt.com/docs/enterprise/chatgpt-work-overview: “Allowing a website doesn’t approve every action on that site. ChatGPT can request a separate confirmation before actions that could create a financial, legal, account, or other consequential commitment.” (read 6 November 2026)
OpenAI: ChatGPT Work: AI for Projects, Tasks, and Teams, https://chatgpt.com/work/: “Give ChatGPT Work a goal, schedule recurring work, or ask it to watch for updates while it gathers context, makes a plan, and checks in when judgment or approval matters.” (read 6 November 2026)
OpenAI: ChatGPT Work Overview, https://learn.chatgpt.com/docs/enterprise/chatgpt-work-overview: “Cloud execution runs supported steps on OpenAI-managed infrastructure.” (read 6 November 2026)
OpenAI: ChatGPT Work Overview, https://learn.chatgpt.com/docs/enterprise/chatgpt-work-overview: “By default, ChatGPT asks before visiting a new website.” (read 6 November 2026)
OpenAI: ChatGPT Work: AI for Projects, Tasks, and Teams, https://chatgpt.com/work/: “Schedule one-time or recurring tasks for yourself.” (read 6 November 2026)
Meta: How We Built Safety Into Muse, https://muse.ai/blog/security-and-safety-for-ai-agents-our-approach-with-muse: “We think this is a good default — every Muse user gets a better personal agent as we all collectively use the product and help the model understand the intricacies of human life.” (read 6 November 2026)
Meta: How We Built Safety Into Muse, https://muse.ai/blog/security-and-safety-for-ai-agents-our-approach-with-muse: “If you do not want your data to be used in model training at all, you can opt-out via a simple switch in Muse settings.” (read 6 November 2026)
Meta: Introducing Muse: The World’s First Personal AI Agent Built for Everyone, https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/: “People can also opt out of their interactions being used to train Meta’s AI models.” (read 6 November 2026)
Meta: Introducing Muse: The World’s First Personal AI Agent Built for Everyone, https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/: “Muse checks with the person before sensitive actions like sending an email or making a purchase.” (read 6 November 2026)
Meta: Muse for Small Business: Build Your Company with AI, https://muse.ai/business: “No. Nothing publishes, sends or spends without your approval, and you can undo it.” (read 6 November 2026)
Meta: Muse — Your Personal AI Agent from Meta, https://muse.ai/: “Muse Secure VM is a persistent, isolated Linux computer with a full browser that you and your agent can use to complete tasks, allowing you to intervene at any point.” (read 6 November 2026)
Meta: Introducing Muse: The World’s First Personal AI Agent Built for Everyone, https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/: “Muse is a personal AI agent. It doesn’t just answer questions, it actually does the work.” (read 6 November 2026)
Meta: The Future Is for Everyone: Muse for Small Business, https://about.fb.com/news/2026/09/introducing-muse-small-business/: “Earlier this month we introduced Muse, a personal AI agent available in the US and Canada that completes tasks on your behalf.” (read 6 November 2026)
OpenAI: Control your dot, https://learn.chatgpt.com/docs/dots/controls: “Your ChatGPT data controls also apply to eligible conversations with your dot and the work it carries out.” (read 6 November 2026)
OpenAI: Safety and security in dots, https://learn.chatgpt.com/docs/enterprise/dots-security: “Enterprise data is not used to train models by default.” (read 6 November 2026)
OpenAI: Meet dots, https://learn.chatgpt.com/docs/dots: “Before an action affects your accounts or shares information, review determines whether your dot can proceed, needs your approval, or must hand a step over to you.” (read 6 November 2026)
OpenAI: Meet dots, https://learn.chatgpt.com/docs/dots: “Your dot can make mistakes, and stopping a task doesn’t undo actions it has already completed.” (read 6 November 2026)
OpenAI: Manage dots permissions and capabilities, https://learn.chatgpt.com/docs/enterprise/dots-admin-guide: “Removing access does not reverse actions already completed in another service.” (read 6 November 2026)
OpenAI: Manage dots permissions and capabilities, https://learn.chatgpt.com/docs/enterprise/dots-admin-guide: “You choose who can use dots, configure their capabilities, and manage personal dots across your workspace.” (read 6 November 2026)
OpenAI: Manage dots permissions and capabilities, https://learn.chatgpt.com/docs/enterprise/dots-admin-guide: “Pause a dot from Admin Console when you need to stop it temporarily. An admin pause prevents the member from resuming the dot.” (read 6 November 2026)
OpenAI: Manage dots permissions and capabilities, https://learn.chatgpt.com/docs/enterprise/dots-admin-guide: “Each member chooses whether to create a personal dot.” (read 6 November 2026)
OpenAI: Manage dots permissions and capabilities, https://learn.chatgpt.com/docs/enterprise/dots-admin-guide: “A dot is a personal agent in ChatGPT that can take on ongoing work, use connected apps, and delegate tasks to Work or Codex.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “You agree that we may use Materials to develop, provide, maintain and improve the Services and our other products and services, including training AI models, and for any purpose specified in our Privacy Notice, subject to your opt-out rights and Vault materials as outlined below.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “If you do not want us to use your Materials to train AI models, you can opt out by visiting app.instinct.com/settings.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “However, for Materials that you add to our feature of the Service known as the "Vault" (or its successor name), we will only use such Materials to provide the Services to you and will not use such Materials to train AI models.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “We may implement safeguards, confirmation requirements, or other controls on certain Actions; however, we make no representation or warranty that such safeguards will prevent unintended or erroneous Actions.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “You hereby appoint the Services as your agent to enter into agreements, commitments or transactions on your behalf or confirm your acceptance to the terms and conditions of any such third party service or application that the Services interact with on your behalf as part of such Actions. Any such agreements or commitments shall be binding on you as if entered into directly by you.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “We are not responsible for any unintended Actions or any loss, damage, charge, liability, or other consequence arising from Actions, including interactions with any Connected Services on your behalf.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “You authorize the Services to take Actions on your behalf as the Services may deem are responsive to your Input.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “We hereby permit you to use the Services for your personal use only, provided that you comply with these Terms in connection with all such use.” (read 6 November 2026)
SpaceXSI: Grok Bot: frequently asked questions, https://docs.x.ai/grok-bot/faq: “Grok Bot uses Cursor authentication and account data settings. Training opt-out follows the applicable Cursor account and privacy settings.” (read 6 November 2026)
SpaceXSI: Grok Bot for teams and enterprises, https://docs.x.ai/grok-bot/teams-and-enterprises: “With Privacy Mode enabled, customer data is not used for training; Cursor enforces this on its servers, and when the setting cannot be verified, the system defaults to not training.” (read 6 November 2026)
SpaceXSI: Grok Bot: frequently asked questions, https://docs.x.ai/grok-bot/faq: “The answer depends on the tool, the risk of the action, and—when enforcement is enabled—your Auto-review rules. Sensitive or consequential actions can stop for approval.” (read 6 November 2026)
SpaceXSI: Approvals, security, and privacy, https://docs.x.ai/grok-bot/approvals-security-and-privacy: “Most actions run on their own. When one needs your OK, the Bot shows an approval card in your chat with the proposed operation and its inputs, and waits for your answer.” (read 6 November 2026)
SpaceXSI: Approvals, security, and privacy, https://docs.x.ai/grok-bot/approvals-security-and-privacy: “When you ask for an email in chat, it goes out once Auto Review allows it.” (read 6 November 2026)
SpaceXSI: Approvals, security, and privacy, https://docs.x.ai/grok-bot/approvals-security-and-privacy: “An approval controls the proposed action. It does not reverse work already completed.” (read 6 November 2026)
SpaceXSI: Grok Bot security, https://docs.x.ai/grok-bot/security: “Ask first rules always stop matching actions, and Allow automatically rules let matching actions proceed only when the reviewer finds no other reason to stop.” (read 6 November 2026)
SpaceXSI: Approvals, security, and privacy, https://docs.x.ai/grok-bot/approvals-security-and-privacy: “Auto Review is on by default.” (read 6 November 2026)
SpaceXSI: Grok Bot: frequently asked questions, https://docs.x.ai/grok-bot/faq: “On a self-serve Cursor Teams plan, every member gets Grok Bot on their Cursor account, without a Premium seat or an admin request” (read 6 November 2026)

Prest0 is not affiliated with, or endorsed by, any of these companies, and names their products only to compare them.

Claude and Claude Duet are trademarks of Anthropic, PBC. ChatGPT is a trademark of OpenAI. Muse and Meta are trademarks of Meta Platforms, Inc. OpenAI dots and ChatGPT are trademarks of OpenAI. Instinct is a trademark of Spear Street Technology, Inc. Grok and Grok Bot are trademarks of SpaceX Super Intelligence LLC.