Databricks AI Footnotes
What Databricks's AI features do with your data, as Databricks publishes it. Checked October 31, 2026. Databricks in the Directory.
Agent access
Databricks-provided MCPs in the system.ai schema, invoked through Unity Gateway; the Genie One MCP is generally available, and system.ai.dbsql, system.ai.sandbox and system.ai.web_search need the Unity Gateway beta. Workspace MCP endpoints for Genie Agents, AI Search, SQL and functions are in Public Preview. The Genie Agents API (Conversation API) serves apps and agents. source, source 2, source 3, source 4, source 5 · checked October 31, 2026
Stage: generally available. Authentication: OAuth with the listed scope (ai-gateway for Unity Gateway MCPs); Unity Catalog grants and Unity Gateway policies govern system.ai MCPs. The Genie Agents API uses OAuth U2M or service principals (OAuth M2M).
Genie Code
Databricks workspace (AI coding and data assistant)
| On by default? | On by default outside compliance-security-profile (CSP) workspaces: the partner-powered AI features setting that Genie Code's agentic capabilities need is enabled by default there and disabled by default in CSP workspaces. Without it, Genie Code runs without agentic capabilities on a Databricks-hosted model. source, source 2 · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Databricks is removing the partner-powered AI features setting that Genie Code's agentic capabilities need. Where it is on, the account and workspace toggles are already disabled and it can be turned off only through the Settings API; after removal, only through the Databricks account team. Where it is off, admins can still turn it on. Each workspace keeps its current value. Genie budgets can block usage. source, source 2, source 3, source 4, source 5, source 6 · checked October 31, 2026 |
| Trains on customer data? | No. Databricks does not use data, prompts or responses from its AI assistive features to train generative foundation models it makes available to third parties. source · checked October 31, 2026 |
| Retention | Genie Code chat history is stored with other notebook content. Partner model providers use zero data retention endpoints and do not retain prompts or responses. source, source 2 · checked October 31, 2026 |
| Where data is processed | AI assistive features are Designated Services processed within the workspace's Geo; admins can allow cross-Geo processing, and data is not stored outside the Geo either way. Americas workspaces use a US-based model and Europe workspaces a Europe-based model. source, source 2, source 3 · checked October 31, 2026 |
| Model providers | With the partner-powered AI features setting on (the default outside compliance-security-profile workspaces), models hosted by Azure OpenAI service, OpenAI on Databricks or Anthropic on Databricks; Anthropic on Databricks runs inside the Databricks security perimeter. With it off, Databricks-hosted open models such as OpenAI GPT OSS where available. The sub-processor list names Anthropic, PBC and OpenAI, L.L.C. for AI-backed services. source, source 2, source 3, source 4, source 5 · checked October 31, 2026 |
| Price | Pay-as-you-go since July 8, 2026: each user gets 150 DBUs of free usage per month, then 0.070 USD per DBU plus underlying compute, at the pricing page's default selection (Premium plan, AWS, US East (N. Virginia)). 150 DBUs equal 10.50 USD in US East; the dollar figure varies by region. A 25% discount runs until January 31, 2027. source, source 2, source 3, source 4, source 5 · checked October 31, 2026 |
Genie Agents
Databricks AI/BI (Genie Agents were formerly Genie Spaces)
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Creating Genie Agents needs the Databricks SQL access entitlement; using them needs data and compute privileges, which only workspace users can hold. Genie budgets can block usage. source, source 2, source 3 · checked October 31, 2026 |
| Trains on customer data? | No. Databricks does not use data, prompts or responses from its AI assistive features to train generative foundation models it makes available to third parties. source · checked October 31, 2026 |
| Retention | Genie Agent responses are stored in the encrypted Databricks control plane database. Partner model providers do not retain data. source, source 2 · checked October 31, 2026 |
| Where data is processed | AI assistive features are Designated Services processed within the workspace's Geo; admins can allow cross-Geo processing, and data is not stored outside the Geo either way. Americas workspaces use a US-based model and Europe workspaces a Europe-based model. source, source 2, source 3 · checked October 31, 2026 |
| Model providers | With the partner-powered AI features setting on (the default outside compliance-security-profile workspaces), Genie Agents chat mode uses Azure OpenAI service and OpenAI on Databricks, and agent mode uses OpenAI on Databricks and Anthropic on Databricks, which runs inside the Databricks security perimeter. With the setting off, these modes are not available. The sub-processor list names Anthropic, PBC and OpenAI, L.L.C. for AI-backed services. source, source 2, source 3, source 4, source 5, source 6 · checked October 31, 2026 |
| Price | Free for users through January 31, 2027; service principals are billed. From February 1, 2027: 150 DBUs of free usage per user per month, then 0.070 USD per DBU plus underlying compute, at the pricing page's default selection (Premium plan, AWS, US East (N. Virginia)). source, source 2, source 3, source 4 · checked October 31, 2026 |
Genie One
Databricks UI and chat for business users
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Account admins can create Genie budgets in the account console (Unity Gateway resource type, tag databricks-product: genie) with shared and per-user thresholds that alert or block usage. Where the partner-powered AI features setting is off, chat in Genie One is not available; that setting can no longer be turned off in the settings page where it is on. source, source 2, source 3, source 4 · checked October 31, 2026 |
| Trains on customer data? | No. Databricks does not use data, prompts or responses from its AI assistive features to train generative foundation models it makes available to third parties. source · checked October 31, 2026 |
| Retention | Genie One chat conversations are stored in the encrypted Databricks control plane database. Partner model providers do not retain data. source, source 2 · checked October 31, 2026 |
| Where data is processed | AI assistive features are Designated Services processed within the workspace's Geo; admins can allow cross-Geo processing, and data is not stored outside the Geo either way. Americas workspaces use a US-based model and Europe workspaces a Europe-based model. source, source 2, source 3 · checked October 31, 2026 |
| Model providers | With the partner-powered AI features setting on (the default outside compliance-security-profile workspaces), Genie One uses OpenAI on Databricks and Anthropic on Databricks, which runs inside the Databricks security perimeter. With the setting off, chat in Genie One is not available. The sub-processor list names Anthropic, PBC and OpenAI, L.L.C. for AI-backed services. source, source 2, source 3, source 4, source 5 · checked October 31, 2026 |
| Price | Free for users through January 31, 2027; service principals are billed. From February 1, 2027: 150 DBUs of free usage per user per month, then 0.070 USD per DBU plus underlying compute, at the pricing page's default selection (Premium plan, AWS, US East (N. Virginia)). source, source 2, source 3, source 4 · checked October 31, 2026 |
Agent Bricks
Databricks agent developer platform
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Not published as of October 31, 2026 |
| Trains on customer data? | Not published as of October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | Foundation Model APIs, which serve Databricks-hosted models, are a Designated Service that uses Databricks Geos for data residency. source · checked October 31, 2026 |
| Model providers | Customer's choice of model: Unity Gateway offers frontier and open models, including Databricks-hosted Foundation Model APIs and models from external providers. source · checked October 31, 2026 |
| Price | Not published as of October 31, 2026 |
Connections to outside MCP servers
Genie Code connects to MCP servers in the workspace and to Databricks-provided connectors (Google Drive, Gmail, Google Calendar, Microsoft 365, Atlassian, Glean in Beta, Slack, GitHub); workspace admins control which servers are available and each user authenticates separately. Genie Agents can attach MCP connectors (Beta). Genie One chat can connect external sources such as Google Drive or SharePoint. source, source 2, source 3, source 4, source 5 · checked October 31, 2026
Compliance
- HIPAA: Enabling HIPAA through the compliance security profile applies the Databricks BAA unless a separate one is signed. Databricks says AI assistive features can be used with PHI once the compliance security profile and standard are enabled, and its HIPAA feature table lists Genie Code, Genie One, Genie Spaces and Managed MCP Servers. source, source 2, source 3, source 4 · checked October 31, 2026
- FedRAMP: Databricks says it is a FedRAMP Authorized Cloud Service Offering at the moderate impact level in AWS US East-1, US-East-2, US-West-1 and US West-2, with the compliance security profile required; Databricks on AWS GovCloud serves FedRAMP High and DoD IL5. With partner-powered AI off, Genie Code's Databricks-hosted models are available in CSP workspaces under FedRAMP Moderate in US regions. source, source 2, source 3 · checked October 31, 2026
EU AI Act
Databricks states it is committed to responsible AI consistent with the EU AI Act, describes itself as an AI system provider and downstream distributor of third-party general-purpose AI models, and says customers assess whether their uses are high-risk. source, source 2, source 3 · checked October 31, 2026
Not published by Databricks as of October 31, 2026
- A setting that turns Genie One, Genie Agents or Genie Code off entirely (Databricks publishes budgets that block usage and the partner-powered AI setting)
- Retention period for Genie chat histories and Genie Agent responses
- Whether Databricks trains its own Databricks-hosted models on customer data from Agent Bricks or other non-assistive AI services
- A single list price for Agent Bricks (charges follow the underlying model, compute and storage services)
- A release stage for the Genie Agents API
Changes
No changes recorded since the first check on October 31, 2026.
How this page is made, and how to send a correction: method.