Skip to main content
ShadowAI Defense GitHub
← All services

Grammarly · Productivity

Grammarly

Conditional Enterprise tier: Available DPA: Yes

Network signatures

Domains: grammarly.com, app.grammarly.com

API endpoints: capi.grammarly.com

SNI patterns: *.grammarly.com

Client signatures

Process names: Grammarly Desktop.app (macOS), Grammarly.exe (Windows)

Browser extensions: Grammarly (risk: elevated)

Risk profile (1–5)

  • Data exfiltration: 4
  • IP loss: 4
  • Output quality (hallucination / legal): 2
  • Integration risk (OAuth, extensions, agentic): 3

Data egress concerns

  • Every typed document
  • Customer-facing email drafts
  • Confidential reports

Training-use default

Business tier opt-out of training is standard. Consumer tier defaults differ — review.

Applicable detection rules

References