For GitHub Copilot Business and Enterprise plans, data handling is designed with organizational privacy as a priority. Prompts (the code and context sent to the service) and Suggestions (the code returned by the service) are transmitted to generate real-time suggestions but are discarded immediately after a response is returned; they are not retained. In contrast, User Engagement Data—which includes metrics like latency, feature usage, and suggestion acceptance/dismissal rates, along with pseudonymous identifiers—is collected to monitor and improve the service's health and performance. This specific type of data is retained for a period of two years.

B. This is incorrect. For Business and Enterprise plans, Prompts and Suggestions are explicitly not retained. Retention of this data is a feature of the Copilot for Individuals plan (if not opted out).

D. This is incorrect. The official documentation clearly states that User Engagement Data is retained for two years, not one, for service improvement and analysis.

1. GitHub Docs

"GitHub Copilot Trust Center." Under the "Data Privacy" section for Copilot Business

it states

"Prompts and Suggestions are not retained for any GitHub Copilot client." This directly supports answer A and refutes B.

2. GitHub Docs

"GitHub Copilot Trust Center." In the same "Data Privacy" section

under the "What data does GitHub Copilot for Business collect?" subsection

it specifies

"User Engagement Data... This data is retained for 2 years." This directly supports answer C and refutes D.