Skip to main content
ShadowAI Defense GitHub
← All services

Copy.ai · Productivity

Copy.ai

Allow Enterprise Enterprise tier: Available DPA: Yes

Network signatures

Domains: copy.ai, app.copy.ai

API endpoints: api.copy.ai

SNI patterns: *.copy.ai

Client signatures

Risk profile (1–5)

  • Data exfiltration: 3
  • IP loss: 3
  • Output quality (hallucination / legal): 2
  • Integration risk (OAuth, extensions, agentic): 2

Data egress concerns

  • Sales email drafts containing customer names, deal sizes, and internal pricing
  • Marketing copy inputs that reveal product roadmaps or unreleased feature details
  • Internal workflow prompts that describe business processes or proprietary methodologies
  • Customer case study data pasted for content generation

Training-use default

Copy.ai states that Enterprise plan data is not used for model training. Free and lower-tier data handling should be reviewed in current terms. Confirm opt-out mechanisms for non-enterprise tiers.

Applicable detection rules

References