Microsoft put 'no training on your data' in writing for schools. A GC or sub can ask AI vendors for the same terms
Microsoft's school AI standard turns privacy promises into contract terms a customer can enforce. Contractors sending bid files, drawings and pay apps to AI tools can borrow the checklist.
Microsoft has agreed to put "we will not train AI on your data" into school customer contracts, where a district can enforce it. A contractor can't use that deal directly, but it hands every GC and sub a model for the clauses to request before pasting bid files, drawings or pay apps into an AI tool.
What did Microsoft actually agree to?
On Sept. 9, Microsoft, the American Federation of Teachers and the United Federation of Teachers announced a national AI safety and privacy standard for schools. Per Microsoft's announcement, the commitments include:
- Student and educator data will not be used to train AI models, sold, or repurposed.
- Schools control how data is used, retained and deleted.
- AI cannot make decisions without human oversight.
- Vendors must explain in plain language how their tools work and communicate product changes and risks.
- Districts can end agreements and seek damages from companies that break the rules, according to UFT President Michael Mulgrew.
Districts can add the protections to their Microsoft customer agreements, which is what makes them contractually enforceable. A Nov. 2 daily digest from The Neuron says Microsoft began offering the protections on Nov. 1, and notes the standard does not automatically apply identically to every school.
Is the promise as clean as it sounds?
Not entirely. eWeek reported that some data use remains, so "no training" does not mean "no use of the data at all." Coverage also differs on whether districts must opt in. Fortune covered the announcement as enforceable by contract. Read the actual clause, not the headline. That advice applies to your vendors too.
What does this mean for a GC or trade sub?
Your project data is not student data, but it is confidential in the same practical way: bid pricing, sub quotes, owner drawings, security-sensitive plans and employee records. Many owner agreements restrict who may handle project documents. When an estimator or PM uploads a spec book to a free chat tool, the only protection is whatever the vendor's terms say that month.
The school deal shows the pattern to copy. Ask for the commitment in the agreement itself:
| Ask | What to look for in the clause |
|---|---|
| No training on your data | Plain language covering inputs, outputs and uploaded files, with any exceptions listed |
| Retention and deletion | You set the period and can delete on request |
| Breach notice | A stated number of hours or days, not "promptly" |
| Subprocessors | Named, with notice before changes |
| Human review | A person signs off on any consequential automated decision |
| Remedies | Termination rights and damages if the vendor breaks the terms |
Who has leverage to get this?
Microsoft agreed because a national union and large districts asked as a group. A 40-person mechanical sub won't get a custom clause from a major vendor. But you do have options:
- Use the business or enterprise tier of a tool, where no-training terms are usually part of the agreement, and read the data processing addendum.
- Ask your software vendors, such as your estimating, document control and ERP providers, to put their AI data terms in writing before you turn on new AI features.
- Add AI language to your own subcontracts and owner contract reviews so you know what your partners may upload.
What still needs your judgment?
A strong clause doesn't stop an employee from using a personal account. It also doesn't cover where your data goes after the vendor passes it to a subprocessor. Pair the contract with a short written policy on which tools hold which files.
What should you do this week?
Pick the one AI tool your team uses most. Find its data terms, then check it against the table above. If any row is missing, fix that before the next bid package goes in.
- Can a contractor require an AI vendor to not train on its project data?
- Yes, in the contract. A vendor's marketing page or help-center article can change; a clause in your agreement is what you can enforce. Microsoft's school standard shows a major vendor will put a no-training commitment in writing when a large customer group asks.
- What AI contract terms should a GC or subcontractor ask for?
- Ask for a written ban on training with your data, your control over retention and deletion, a stated breach-notice window, disclosure of subprocessors, and human review of any consequential automated decision. Remedies for breach should be in the contract too.
- Does Microsoft's school AI standard apply to construction companies?
- No. It covers U.S. school districts that add it to their Microsoft agreements. It matters to contractors as a precedent for contract language they can request from their own AI vendors.
- Are bid documents and drawings sensitive enough to protect in an AI contract?
- Usually yes. Bid pricing, subcontractor quotes, owner drawings and security-sensitive plans are confidential, and many owner contracts restrict who may handle them. Sending them to an AI tool with open-ended data terms can put you in conflict with those obligations.