The Grok Bot Terms supplement the Customer's agreement and apply when Customer enables or accesses Grok Bot
These Grok Bot Terms supplement the agreement governing the Customer's use of the Services, which include the product identified as Grok Bot. That agreement includes any applicable Order Forms, data processing addendum, acceptable use policy and incorporated terms (the “Agreement”). Grok Bot is deemed part of the Service or Services, as applicable under the Agreement, when the Customer enables or accesses it. Capitalized terms not defined here have the meanings given in the Agreement. The page is labeled “Last updated September 3, 2026.”
Supporting quotations
supplement the agreement governing Customer
Grok Bot is deemed part of the
when Customer enables or accesses it.
Capitalized terms not defined here have the meanings given in the Agreement.
Last updated September 3, 2026
Not stated here
Who the “Customer” is and what the underlying Agreement says are not defined in this source.
The Order Forms, data processing addendum and acceptable use policy are referred to but not supplied here.
Legal Rights & Agreement Rules · Context
Provider, User and Customer Data are defined, and the Terms create no relationship with Provider's affiliates
“Provider” means the entity providing Grok Bot to the Customer under the Agreement, and “User” means an individual authorized to use Grok Bot. The Grok Bot Terms do not change the contracting party or create a contractual relationship between the Customer and any affiliate of the Provider. “Customer Data” includes inputs and other content submitted or made available by or for the Customer.
Supporting quotations
means the entity providing Grok Bot to Customer under the Agreement
These Grok Bot Terms do not change the contracting party or create a contractual relationship between Customer and any affiliate of Provider.
includes inputs, and other content submitted or made available by or for Customer.
Not stated here
Which entity is the Provider is not named in this source.
Account & Service Control · Permission or license
Customer may let Users use Grok Bot for internal business purposes and must configure its settings and limits
Subject to the Agreement, the Provider's acceptable use policy, and the applicable account settings and permissions, the Customer may permit its Users to access and use Grok Bot for the Customer's internal business purposes. The Customer is responsible for configuring and administering available settings, permissions, approval requirements, integrations and usage limits, and available controls may depend on its plan, configuration and deployment.
Supporting quotations
Subject to the Agreement, the Provider
acceptable use policy, and the applicable account settings and permissions, Customer may permit its Users to access and use Grok Bot for Customer
internal business purposes. Customer is responsible for configuring and administering available settings, permissions, approval requirements, integrations, and usage limits.
Available controls may depend on Customer
Not stated here
Whether use for purposes other than internal business purposes is permitted is not stated here.
Legal Rights & Agreement Rules · Restriction or exception
Use Grok Bot per Provider's Documentation, which creates no service level, warranty or availability commitment
The Customer and its Users will use Grok Bot in accordance with the Provider's Documentation, which describes functionality, requirements, limits, controls and recommended practices. The Documentation does not create a service level, warranty or commitment that any feature, integration, model or configuration will remain available.
Supporting quotations
Customer and its Users will use Grok Bot in accordance with Provider
Documentation, which describe functionality, requirements, limits, controls, and recommended practices.
The Documentation does not create a service level, warranty, or commitment that any feature, integration, model, or configuration will remain available.
Not stated here
The Provider's Documentation is not supplied.
Use & Processing · Company practice
Grok Bot may take autonomous actions for Customer, such as running code, sending communications and invoking tools
Grok Bot may perform autonomous actions on the Customer's behalf (“Agentic Actions”), including without limitation accessing websites, executing code, modifying files, sending communications, processing data, invoking tools and interacting with third-party services.
Supporting quotations
Grok Bot may perform autonomous actions on Customer
including without limitation accessing websites, executing code, modifying files, sending communications, processing data, invoking tools, and interacting with third-party services.
Not stated here
The list is introduced by “including without limitation”, so it is not stated to be exhaustive.
Legal Rights & Agreement Rules · Restriction or exception
Customer authorizes Agentic Actions, including autonomous ones within its granted access, and is solely responsible
The Customer authorizes Agentic Actions requested, approved, configured or permitted by the Customer or its Users, including Agentic Actions Grok Bot initiates autonomously within the scope of access, permissions and authority granted by the Customer or its Users. The Customer is solely responsible for ensuring those actions are authorized, lawful and compliant with applicable laws and third-party terms, for configuring permissions, approval requirements and spending limits, and for monitoring recurring or unattended activities. It is also solely responsible for the scope of access granted to each Bot and for any Agentic Action that results from its or its Users' configuration, instructions, permissions, approval settings or failure to implement available safeguards.
Supporting quotations
Customer authorizes Agentic Actions requested, approved, configured, or permitted by Customer or its Users, including Agentic Actions that Grok Bot initiates autonomously within the scope of access, permissions, and authority granted by Customer or its Users.
Customer is solely responsible for ensuring those Agentic Actions are authorized, lawful, and comply with all applicable laws and third party terms, configuring appropriate permissions, approval requirements, and spending limits, and monitoring recurring or unattended activities.
Customer is solely responsible for determining the scope of access, permissions, and authority granted to each Bot and for any Agentic Action that results from Customer
instructions, permissions, approval settings, or failure to implement available safeguards.
Not stated here
How the scope of a Bot's authority is set and shown to the Customer is not described here.
Security & Safeguards · Restriction or exception
Agentic Actions may be wrong or unintended; approval controls are aids only and Provider is not liable if they fail
Agentic Actions may be inaccurate, incomplete, delayed, unsuccessful or unintended. Approval and automated-review controls are provided as aids only, may not identify or prevent every unintended, unauthorized or harmful action, and do not reverse completed actions. The Provider is not liable for any Agentic Action that an approval or automated-review control fails to prevent.
Supporting quotations
Agentic Actions may be inaccurate, incomplete, delayed, unsuccessful, or unintended.
Approval and automated-review controls are provided as aids only, may not identify or prevent every unintended, unauthorized, or harmful action, and do not reverse completed actions.
Provider is not liable for any Agentic Action that an approval or automated-review control fails to prevent.
Not stated here
Whether the Provider offers any way to undo a completed Agentic Action is not stated.
Security & Safeguards · Restriction or exception
Customer must use appropriate human review before permitting Agentic Actions, especially high-impact ones
The Customer will use appropriate human review before permitting Agentic Actions, including those involving external communications, financial transactions, data deletion, permission changes, production systems, legal commitments or material effects on third parties.
Supporting quotations
Customer will use appropriate human review before permitting Agentic Actions, including those involving external communications, financial transactions, data deletion, permission changes, production systems, legal commitments, or material effects on third parties.
Not stated here
What counts as appropriate human review is not defined.
Legal Rights & Agreement Rules · Restriction or exception
Customer bears the consequences of Agentic Actions, and Provider disclaims liability and warranties for them
The Customer is solely responsible for charges, commitments, communications and other consequences resulting from Agentic Actions authorized or initiated by the Customer or its Users. The Provider makes no representations about the accuracy, safety or legality of any Agentic Action and disclaims all liability for Agentic Actions to the fullest extent permitted by law, and Agentic Actions are provided without warranty of any kind. The next card records the gross negligence and willful misconduct exception and the personal data carve-out.
Supporting quotations
Customer is solely responsible for charges, commitments, communications, and other consequences resulting from Agentic Actions authorized or initiated by Customer or its Users.
Provider makes no representations regarding the accuracy, safety, or legality of any Agentic Action and disclaims all liability for Agentic Actions to the fullest extent permitted by law.
without warranty of any kind.
Qualifications & exceptions
The liability disclaimer applies to the fullest extent permitted by law.
Legal Rights & Agreement Rules · Restriction or exception
Provider is not liable for Agentic Action losses unless directly caused by its gross negligence or willful misconduct
In capitals, the Customer acknowledges that Agentic Actions are probabilistic, may contain errors and may produce inaccurate, incomplete, incorrect, offensive, harmful or otherwise unsuitable results. It also says the Customer is solely responsible for all Agentic Actions taken by Grok Bot, whether or not intended, anticipated or authorized by the Customer. The Provider is not liable for any loss, damage, cost, charge, commitment or other consequence arising from any Agentic Action, except to the extent directly caused by the Provider's gross negligence or willful misconduct. A separate sentence says this Section does not limit the Provider's obligations under the Agreement for the processing of personal data.
Supporting quotations
CUSTOMER ACKNOWLEDGES THAT AGENTIC ACTIONS ARE PROBABILISTIC, MAY CONTAIN ERRORS, AND MAY PRODUCE RESULTS THAT ARE INACCURATE, INCOMPLETE, INCORRECT, OFFENSIVE, HARMFUL, OR OTHERWISE UNSUITABLE FOR CUSTOMER
CUSTOMER IS SOLELY RESPONSIBLE FOR ALL AGENTIC ACTIONS TAKEN BY GROK BOT, WHETHER OR NOT SUCH ACTIONS WERE INTENDED, ANTICIPATED, OR AUTHORIZED BY CUSTOMER, INCLUDING ANY AGENTIC ACTION THAT RESULTS FROM CUSTOMER
PROVIDER IS NOT LIABLE FOR ANY LOSS, DAMAGE, COST, CHARGE, COMMITMENT, OR OTHER CONSEQUENCE ARISING FROM ANY AGENTIC ACTION, EXCEPT TO THE EXTENT DIRECTLY CAUSED BY PROVIDER
GROSS NEGLIGENCE, OR WILLFUL MISCONDUCT.
obligations under the Agreement with respect to the processing of personal data
Qualifications & exceptions
The liability exclusion does not apply to the extent directly caused by the Provider's gross negligence or willful misconduct.
The Section does not limit the Provider's obligations under the Agreement for processing personal data.
Not stated here
The text reads “GROSS NEGLIGENCE, OR WILLFUL MISCONDUCT”, with an unusual comma; it is read as an exception for both.
The Provider's personal-data obligations under the Agreement and the data processing addendum are not supplied.
Account & Service Control · Company practice
Provider may remove content or disable Agentic Actions that it reasonably finds violate the Agreement, AUP or law
The Provider may remove content or disable Agentic Actions that it reasonably determines violate the Agreement, the applicable acceptable use policy or applicable law, without prior notice when delay would pose a risk to safety, security or third parties.
Supporting quotations
Provider may remove content or disable Agentic Actions that Provider reasonably determines violate the Agreement, the applicable acceptable use policy, or applicable law, without prior notice when delay would pose a risk to safety, security, or third parties.
Not stated here
Whether notice is given after removal, or before removal when delay is not risky, is not stated.
Sharing & Disclosure · Permission or license
Connecting a third-party service authorizes Grok Bot to access and transmit Customer Data through it
By connecting an account, application, website, add-on or other third-party service to Grok Bot, the Customer instructs and authorizes Grok Bot to access, transmit and interact with Customer Data through that service as directed or configured by the Customer or its Users. The Customer represents that it has authority to grant that access and is responsible for accepting and complying with applicable third-party terms, permissions and charges. Customer Data includes inputs and other content submitted or made available by or for the Customer.
Supporting quotations
By connecting an account, application, website, add-on or other third-party service to Grok Bot, Customer instructs and authorizes Grok Bot to access, transmit, and interact with Customer Data through that service as directed or configured by Customer or its Users.
Customer represents that it has authority to grant such access and is responsible for accepting and complying with applicable third-party terms, permissions, and charges.
includes inputs, and other content submitted or made available by or for Customer.
comply with all applicable laws and third party terms
Not stated here
Which data Grok Bot sends to a connected service, and what that service does with it, is governed by the service's own terms, which are not supplied.
Legal Rights & Agreement Rules · Restriction or exception
Provider disclaims responsibility for connected third-party services; use is at the Customer's own risk
The Provider is not responsible for, does not endorse, makes no warranty regarding and does not provide support for any third-party service, and is not responsible for the availability, security or operation of third-party services. Use of connected services is at the Customer's own risk and the Provider disclaims any liability to the greatest extent permitted by law. The earlier liability exclusion for Agentic Actions also lists connected services among the sources of Customer responsibility.
Supporting quotations
Provider is not responsible for, does not endorse, makes no warranty regarding, and does not provide support for, any third-party service.
Provider is not responsible for the availability, security, or operation of third-party services.
own risk and Provider disclaims any liability to the greatest extent permitted by law.
APPROVAL SETTINGS, CONNECTED SERVICES, ROUTINES, OR FAILURE TO IMPLEMENT AVAILABLE SAFEGUARDS
Qualifications & exceptions
The liability disclaimer applies to the greatest extent permitted by law.
Retention & Deletion · Company practice
Grok Bot may retain Customer Data, credentials, memory and routines in a persistent cloud environment
Grok Bot may retain Customer Data, files, browser sessions, credentials, memory and routines in a persistent cloud environment.
Supporting quotations
Grok Bot may retain Customer Data, files, browser sessions, credentials, memory, and routines in a persistent cloud environment.
Not stated here
How long this information is retained, where the environment is hosted and who at the Provider can access it are not stated.
The text says “may retain”, so it does not say what is retained in a given case.
Security & Safeguards · Restriction or exception
Bots for the same User share an environment, deleting a Bot may not delete shared items, and Customer must clean up
Bots associated with the same User may share the persistent environment and must not be treated as separate security boundaries. Deleting a Bot may not delete shared files, sessions, credentials or routines. The Customer is responsible for deleting or disabling bots, removing data, revoking access and disabling routines when no longer required.
Supporting quotations
Bots associated with the same User may share that environment and must not be treated as separate security boundaries.
Deleting a Bot may not delete shared files, sessions, credentials, or routines.
Customer is responsible for deleting or disabling bots, removing data, revoking access, and disabling routines when no longer required.
Not stated here
How a Customer can remove shared files, sessions, credentials or routines is not described here.
Legal Rights & Agreement Rules · Company practice
Provider may update the Grok Bot Terms; materially adverse changes get reasonable advance notice
The Provider may update these Grok Bot Terms from time to time. Unless an update is materially adverse to the Customer, updates take effect upon posting or other notice. If an update is materially adverse, the Provider will give reasonable notice, subject to applicable laws, before it takes effect (the “Update Notice Period”). The Customer's continued use of Grok Bot after that period counts as acceptance of the updated terms. Updates will not diminish the Customer's rights under the Agreement with respect to Customer Data submitted before the update takes effect.
Supporting quotations
Provider may update these Grok Bot Terms from time to time.
Unless an update is materially adverse to Customer, updates take effect upon posting or other notice to Customer.
If an update is materially adverse to Customer, Provider will provide Customer with reasonable notice (subject to applicable laws) before the update takes effect
continued use of Grok Bot after the Update Notice Period constitutes acceptance of the updated Grok Bot Terms.
rights under the Agreement with respect to Customer Data submitted before the update takes effect.
Not stated here
How long the Update Notice Period is, and how notice is given, are not stated.
Who decides whether an update is materially adverse is not stated.