Software vendor
Glean (Glean Technologies, Inc.)
Glean sells an enterprise AI platform of agents, assistant and search, and commits in its AI Addendum not to train AI models on customer data.
Function
- Ownership
- Not stated
Not stated in the sources read. The AI Addendum is issued by Glean Technologies, Inc.
- Headquarters
- Not stated
- SEC reporting
- NoSourceSEC EDGAR company-name lookups for anthropic, openai, glean and glean technologies, with each listed entity's EDGAR submissions record
- Audit firm
- No
- Subprocessor list
- Not stated
Offering · Software
Glean Work AI Platform
Glean sells an enterprise AI platform of agents, assistant and search that connects to the applications a customer selects while keeping each application's identity, access controls and sharing settings. SourcesGlean – Enterprise AI that Works (home page)Legal (trust statements and customer agreements index)
Its agents reason through tasks, plan next steps and act using company context, can be triggered by events, and can be shared and certified with controls. SourceEnterprise AI agents: Build, deploy & orchestrate | Glean
Glean's AI Addendum lets customers choose models from OpenAI, Anthropic, Google and others, and commits that Glean will not train AI models on customer data. SourceGlean AI Addendum (v5Jun2026)
Under Glean's own model key, Glean says it keeps contractual commitments barring model providers from training on customer data and from storing or logging inputs and outputs, except as required by law or for trust and safety. SourceGlean AI Addendum (v5Jun2026)
Where it fits
CoE analysis Fits organizations that want search and agents across many applications without standardizing on one productivity suite or model provider. SourcesLegal (trust statements and customer agreements index)Glean AI Addendum (v5Jun2026)
CoE analysis Glean's own no-training commitment is unconditional, but the model providers' no-training and zero-day-retention commitments apply when Glean's model key is used, so a customer bringing its own model keys should check its terms with that provider. SourceGlean AI Addendum (v5Jun2026)
What it does
- Offering type
- SoftwareSourceLegal (trust statements and customer agreements index)
- Workflow areas
- SourcesGlean – Enterprise AI that Works (home page)Enterprise AI agents: Build, deploy & orchestrate | Glean
- Enterprise search
- Enterprise assistant
- Agent platform
- Customer size
- Not stated
AI
- Kind of AI
- SourcesGlean – Enterprise AI that Works (home page)Enterprise AI agents: Build, deploy & orchestrate | Glean
- General-purpose assistant
- Agents and automated actions
- Suggests or acts
- Suggests and actsSourcesEnterprise AI agents: Build, deploy & orchestrate | GleanAI Security: Protecting Enterprise Data with Glean
- Availability
- Generally availableSourcesAI Security: Protecting Enterprise Data with GleanEnterprise AI agents: Build, deploy & orchestrate | Glean
Search, assistant and agents are presented without a preview label; several agent security and governance controls are labeled beta or coming soon on the security page.
- Models named
- SourceGlean AI Addendum (v5Jun2026)
- OpenAI
- Anthropic
Control
- Who controls it
- Customer ITSourcesLegal (trust statements and customer agreements index)AI Security: Protecting Enterprise Data with Glean
Commercial
- Pricing model
- Not stated
- Public price
- Not stated
Evidence
- Independent outcomes
- None found in the sources read.
- Sources read
- Vendor-stated 7
- Independent market evidence None read
- Independently verified outcomes None read
- Pricing None read
- Known limitations 2
- Coverage
- Directory record
- Last verified
Security and control
- Single sign-on
- SupportedSourceAI Security: Protecting Enterprise Data with Glean
Glean verifies who is making a request through the customer's SSO provider before AI runs, for both user and agent identity. Protocols and plans are not stated.
- User provisioning
- Not stated
Not described on the pages read.
- Role-based access
- Not stated
Glean says it maintains each connected application's identity, access controls and sharing configurations and enforces source-system permissions on every read and write; Glean's own administrator roles are not described.
- Administrator controls for AI
- Not stated
Agents can be rolled out, shared and certified with controls; agent actions are checked before execution. Agent governance policies and per-agent or per-user policies are labeled coming soon, and security scans of agents are in beta.
- Audit logs
- SourceAI Security: Protecting Enterprise Data with Glean
Covers AI actions: Yes
Exportable: Yes
Every control point is logged to an end-to-end audit trail, with events available to stream into a SIEM. Retention is not stated.
- Certifications
- ISO 42001
AI management system certified to ISO/IEC 42001:2023 by an independent accredited certification body for Glean's enterprise AI solutions, including its search, assistant, agent, automation and third-party integration solutions; Glean commits in the AI Addendum to maintain it, or a successor certification, during the subscription term.
- SOC 2 Type 2
Glean states it is SOC 2 Type II certified; report scope and period not stated.
- ISO 27001
Glean states it is certified to ISO/IEC 27001; scope not stated.
- ISO 42001
- Data retention
- SourcesGlean AI Addendum (v5Jun2026)Legal (trust statements and customer agreements index)
Zero-retention option: Yes
Prompts and outputs: For services using Glean's model key, zero-day retention: model providers are prohibited from storing or logging customer inputs or outputs, except as required by law or for trust and safety. Retention inside Glean is not stated on the pages read; a Limited Retention Addendum is listed but was not read.
- Data residency
- Not stated
Glean describes customer-controlled hosting choices; regions are not named on the pages read.
Customers can choose models from providers such as OpenAI, Anthropic and Google.
- Training on customer data
- Not usedSourceGlean AI Addendum (v5Jun2026)
Scope: Vendor models, Third party models
Where stated: Contract
AI Addendum section 3.a: Glean will not use Customer Data to train, re-train, improve or fine-tune any AI models; for services using Glean's model key, Glean keeps contractual commitments barring model providers from doing so.
AI features
As the vendor or firm describes them. Notes in small print record what the sources leave open.
Glean Assistant and Search
Permission-aware search and assistant across connected applications, with every query, answer and action tracked.
- Kind
- General-purpose assistant
- Suggests or acts
- Suggests
- Who controls it
- Customer IT
- Availability
- Generally available
Control: Access follows each connected application's permissions; customers choose hosting options and models.
SourcesGlean – Enterprise AI that Works (home page)Legal (trust statements and customer agreements index)Glean Agents
Agents that reason, plan and act on enterprise context, triggered by events and routed between agents; rolled out, shared and certified with controls; agent actions checked against the user's intent and authority before execution.
- Kind
- Agents and automated actions
- Suggests or acts
- Acts
- Who controls it
- Customer IT
- Availability
- Generally available
Control: Agent governance policies and per-agent policies are labeled coming soon; security scans of agents are in beta.
SourcesEnterprise AI agents: Build, deploy & orchestrate | GleanAI Security: Protecting Enterprise Data with Glean
Questions to ask
For this offering
- Will we use Glean's model key or our own, and which no-training and retention commitments apply in each case?
- Which agent governance controls we are relying on are still in beta or coming soon, and when will they be generally available?
- What does the audit trail record for an agent's write action, and in what format does it stream to our SIEM?
- How is Glean priced for our user count and agent usage, given that no public pricing page is served?
- Does Glean's ISO/IEC 42001 certificate and SOC 2 Type II report cover the agent features we would use?
From the diligence question set
- DQ-02 Which AI features depend on models, data or services from third parties, and how do you assess and monitor those providers?
- DQ-04 Which AI features are in the modules and edition we license, or would license, and is each generally available, in preview or beta, a paid add-on, or limited by edition or region?
- DQ-13 What does the system record for each AI output or action, and can we export and keep those records for as long as we need them?
- DQ-16 Is our data, including inputs, outputs, documents and corrections, used to train or improve any model, yours or a third party's? Is that off by default, and is the commitment in the contract?
- DQ-18 Can a feature reach data or take actions beyond the permissions of the user it works for, and how is it protected against instructions hidden in the documents or data it reads?
- DQ-19 How are the AI features priced: included in the subscription, sold as an add-on or higher tier, or metered by use? What is the billing unit?
