Zed's AI features (Zed Agent, Edit Prediction, Inline Assistant, and Git commit generation) follow specific privacy boundaries depending on the request path. By default, Zed does not retain your prompts or code context.
AI Request Paths
| Path | Who handles requests | Privacy Note |
|---|
| Zed-hosted models | Zed routes to providers | Providers are prohibited from training on your data and require zero data retention (except for designated safety-retention models) |
| Provider API keys | The configured provider | Requests are handled under the provider's terms. Keys are stored in the system keychain, not settings.json |
| Existing subscriptions | The subscription provider | Requests are handled under the subscription terms |
| Gateways | The gateway and upstream providers | Handled under gateway/upstream terms |
| Local models | Local server or self-hosted endpoint | Handled according to your local server configuration |
| External Agents | The External Agent and its providers | Handled under the agent's own terms |
| Terminal Threads | The CLI or TUI in the terminal | The CLI/TUI owns its auth, routing, and data handling |
| Edit Prediction | The selected provider | Keystrokes send local context to the provider. Zeta requests are transient unless training opt-in is enabled |
| Agent tools/MCP | Zed, MCP servers, and external systems | Permissions depend on profile, MCP server, and tool settings |
| Project trust | Zed and the trusted worktree | Instructions are loaded from trusted worktrees |
Zed-Hosted Model Commitments
For models hosted by Zed, providers like Anthropic, Google, and OpenAI have agreements that prohibit training on your prompts or code context and require zero data retention for inference requests.