Eminence Growth Solutions, home
Menu

Software vendor

Glean (Glean Technologies, Inc.)

Glean sells an enterprise AI platform of agents, assistant and search, and commits in its AI Addendum not to train AI models on customer data.

1 offering in the directory Last verified

Ownership
Not stated

Not stated in the sources read. The AI Addendum is issued by Glean Technologies, Inc.

Headquarters
Not stated
Audit firm
No
Subprocessor list
Not stated

Offering · Software

Glean Work AI Platform

Directory recordLast verified Compare with othersBuild questions for this vendor

Glean sells an enterprise AI platform of agents, assistant and search that connects to the applications a customer selects while keeping each application's identity, access controls and sharing settings. SourcesGlean – Enterprise AI that Works (home page)Legal (trust statements and customer agreements index)

Its agents reason through tasks, plan next steps and act using company context, can be triggered by events, and can be shared and certified with controls. SourceEnterprise AI agents: Build, deploy & orchestrate | Glean

Glean's AI Addendum lets customers choose models from OpenAI, Anthropic, Google and others, and commits that Glean will not train AI models on customer data. SourceGlean AI Addendum (v5Jun2026)

Under Glean's own model key, Glean says it keeps contractual commitments barring model providers from training on customer data and from storing or logging inputs and outputs, except as required by law or for trust and safety. SourceGlean AI Addendum (v5Jun2026)

Where it fits

CoE analysis Fits organizations that want search and agents across many applications without standardizing on one productivity suite or model provider. SourcesLegal (trust statements and customer agreements index)Glean AI Addendum (v5Jun2026)

CoE analysis Glean's own no-training commitment is unconditional, but the model providers' no-training and zero-day-retention commitments apply when Glean's model key is used, so a customer bringing its own model keys should check its terms with that provider. SourceGlean AI Addendum (v5Jun2026)

What it does

Workflow areas
  • Enterprise search
  • Enterprise assistant
  • Agent platform
SourcesGlean – Enterprise AI that Works (home page)Enterprise AI agents: Build, deploy & orchestrate | Glean
Customer size
Not stated

AI

Kind of AI
  • General-purpose assistant
  • Agents and automated actions
SourcesGlean – Enterprise AI that Works (home page)Enterprise AI agents: Build, deploy & orchestrate | Glean
Availability
Generally available

Search, assistant and agents are presented without a preview label; several agent security and governance controls are labeled beta or coming soon on the security page.

SourcesAI Security: Protecting Enterprise Data with GleanEnterprise AI agents: Build, deploy & orchestrate | Glean
Models named
  • OpenAI
  • Anthropic
  • Google
SourceGlean AI Addendum (v5Jun2026)

Commercial

Pricing model
Not stated
Public price
Not stated

Evidence

Independent outcomes
None found in the sources read.
Sources read
  • Vendor-stated 7
  • Independent market evidence None read
  • Independently verified outcomes None read
  • Pricing None read
  • Known limitations 2
Coverage
Directory record
Last verified

Security and control

Single sign-on
Supported

Glean verifies who is making a request through the customer's SSO provider before AI runs, for both user and agent identity. Protocols and plans are not stated.

SourceAI Security: Protecting Enterprise Data with Glean
User provisioning
Not stated

Not described on the pages read.

Role-based access
Not stated

Glean says it maintains each connected application's identity, access controls and sharing configurations and enforces source-system permissions on every read and write; Glean's own administrator roles are not described.

Administrator controls for AI
Not stated

Agents can be rolled out, shared and certified with controls; agent actions are checked before execution. Agent governance policies and per-agent or per-user policies are labeled coming soon, and security scans of agents are in beta.

Audit logs

Covers AI actions: Yes

Exportable: Yes

Every control point is logged to an end-to-end audit trail, with events available to stream into a SIEM. Retention is not stated.

SourceAI Security: Protecting Enterprise Data with Glean
Certifications
  • ISO 42001

    AI management system certified to ISO/IEC 42001:2023 by an independent accredited certification body for Glean's enterprise AI solutions, including its search, assistant, agent, automation and third-party integration solutions; Glean commits in the AI Addendum to maintain it, or a successor certification, during the subscription term.

  • SOC 2 Type 2

    Glean states it is SOC 2 Type II certified; report scope and period not stated.

  • ISO 27001

    Glean states it is certified to ISO/IEC 27001; scope not stated.

Data retention

Zero-retention option: Yes

Prompts and outputs: For services using Glean's model key, zero-day retention: model providers are prohibited from storing or logging customer inputs or outputs, except as required by law or for trust and safety. Retention inside Glean is not stated on the pages read; a Limited Retention Addendum is listed but was not read.

SourcesGlean AI Addendum (v5Jun2026)Legal (trust statements and customer agreements index)
Data residency
Not stated

Glean describes customer-controlled hosting choices; regions are not named on the pages read.

Customers can choose models from providers such as OpenAI, Anthropic and Google.

Training on customer data
Not used

Scope: Vendor models, Third party models

Where stated: Contract

AI Addendum section 3.a: Glean will not use Customer Data to train, re-train, improve or fine-tune any AI models; for services using Glean's model key, Glean keeps contractual commitments barring model providers from doing so.

SourceGlean AI Addendum (v5Jun2026)

AI features

As the vendor or firm describes them. Notes in small print record what the sources leave open.

  1. Glean Assistant and Search

    Permission-aware search and assistant across connected applications, with every query, answer and action tracked.

    Kind
    General-purpose assistant
    Suggests or acts
    Suggests
    Who controls it
    Customer IT
    Availability
    Generally available

    Control: Access follows each connected application's permissions; customers choose hosting options and models.

    SourcesGlean – Enterprise AI that Works (home page)Legal (trust statements and customer agreements index)
  2. Glean Agents

    Agents that reason, plan and act on enterprise context, triggered by events and routed between agents; rolled out, shared and certified with controls; agent actions checked against the user's intent and authority before execution.

    Kind
    Agents and automated actions
    Suggests or acts
    Acts
    Who controls it
    Customer IT
    Availability
    Generally available

    Control: Agent governance policies and per-agent policies are labeled coming soon; security scans of agents are in beta.

    SourcesEnterprise AI agents: Build, deploy & orchestrate | GleanAI Security: Protecting Enterprise Data with Glean

Questions to ask

For this offering

  • Will we use Glean's model key or our own, and which no-training and retention commitments apply in each case?
  • Which agent governance controls we are relying on are still in beta or coming soon, and when will they be generally available?
  • What does the audit trail record for an agent's write action, and in what format does it stream to our SIEM?
  • How is Glean priced for our user count and agent usage, given that no public pricing page is served?
  • Does Glean's ISO/IEC 42001 certificate and SOC 2 Type II report cover the agent features we would use?

From the diligence question set

  1. DQ-02 Which AI features depend on models, data or services from third parties, and how do you assess and monitor those providers?
  2. DQ-04 Which AI features are in the modules and edition we license, or would license, and is each generally available, in preview or beta, a paid add-on, or limited by edition or region?
  3. DQ-13 What does the system record for each AI output or action, and can we export and keep those records for as long as we need them?
  4. DQ-16 Is our data, including inputs, outputs, documents and corrections, used to train or improve any model, yours or a third party's? Is that off by default, and is the commitment in the contract?
  5. DQ-18 Can a feature reach data or take actions beyond the permissions of the user it works for, and how is it protected against instructions hidden in the documents or data it reads?
  6. DQ-19 How are the AI features priced: included in the subscription, sold as an add-on or higher tier, or metered by use? What is the billing unit?