Independent consulting on rolling out Grok Bot (xAI)
Grok Bot in your company: settle the rules before you demonstrate
With “Teach a task”, Grok Bot learns a workflow when someone on your team demonstrates it once. Before that happens with real data, data protection, the works council and credentials should be sorted out. We support the rollout.
How Grok Bot learns a workflow
Grok Bot is an AI agent from xAI that works on a persistent cloud computer and operates a browser there the way a person would. With “Teach a task” nobody has to describe the workflow: it is demonstrated once and recorded. That is convenient, and it is exactly why the agent sees more than the workflow needs. Each step raises a question that should be answered before the first real use.
Demonstrate
Someone on your team completes a task once in the browser of Grok Bot's cloud computer while the agent watches.
Settle first
Who records, and has this been agreed with the works council?
Recording
According to xAI, up to ten minutes of visible activity on the cloud computer, without microphone audio.
Settle first
Are customer or employee data on screen, or a password in plain view?
Skill
The recording becomes a draft skill that the agent later runs on request or on a schedule.
Settle first
Who reviews the draft, adds rules and approves it?
Cloud computer
Grok Bot works on a persistent computer in Cursor's cloud, currently in the United States according to xAI. All Bots on an account share it.
Settle first
Which sign-ins are stored there, and who else can use them?
Your systems
The agent clicks and types in mailboxes, CRM, portals and web applications it is signed in to.
Settle first
What may it do without asking, and what is logged?
Based on xAI’s documentation at docs.x.ai, as of 21 October 2026. Grok Bot is in beta and evolving; features and terms may change.
What can go wrong during rollout
None of these points rules out Grok Bot. They show where a company without preparation ends up with a data protection, labour law or security problem.
The recording captures more than the workflow
Demonstrating a task with real data also records whatever is visible in the applications at the time: customer names, emails, employee data. xAI itself advises against exposing secrets during the demonstration. Processing takes place at a service provider in the United States. Under the GDPR that requires a legal basis, a data processing agreement and safeguards for the transfer to a third country.
Where there is a works council, it has to be involved
Under settled case law of the German Federal Labour Court, co-determination under Section 87(1) no. 6 of the Works Constitution Act applies as soon as a system is objectively capable of monitoring performance or behaviour. Screen recordings of employees usually are, even if they are only meant for training the agent.
Sign-ins live outside your company and apply to every Bot on an account
A person enters passwords and two-factor codes, and the signed-in session then stays on the cloud computer. According to xAI, all Bots on an account share that computer with its files and sessions, and the separate screens are not security boundaries. Signing in an account with broad permissions there hands it to every Bot and skill on that account.
The agent follows instructions that are not yours
An agent reads web pages, emails and documents. If they contain a planted instruction, it may follow it (prompt injection). xAI marks outside content for the model but states that this reduces the risk without eliminating it. Under Cursor’s Grok Bot Terms, approvals and automated reviews are aids only.
Your team is ahead of IT
Grok Bot can be used with a personal subscription. Employees sometimes try tools like this before any rule exists, and company data then flows through private accounts without a contract or oversight. According to xAI, an organisation-wide switch, network controls and audit logs are only available in the Enterprise edition.
What the Enterprise edition includes and what it does not
According to xAI, the organisation-wide switch, network controls, audit logs, action recording and SCIM are only available in the Enterprise edition. Self-serve teams do not see these settings, and a personal subscription does not have them either. Members sign in with their Cursor account; according to xAI, the account’s SSO configuration applies, for example SAML with Okta, Microsoft Entra, Google Workspace or OneLogin.
Enterprise edition only
- Organisation-wide switch deciding whether Grok Bot may be used
- Network controls for which destinations Bots may reach (without a policy everything is allowed)
- Audit logs for admin, security and authentication events, including export to a SIEM
- Recording of Bot actions (Action Recording), off by default
- User provisioning via SCIM 2.0 from your own identity provider
Not available there either
- No dedicated data loss prevention (DLP) hooks
- No retention policy per organisation
- No on-premises deployment, only Cursor-hosted cloud computers
Based on xAI’s security documentation at docs.x.ai/grok-bot/security, as of 21 October 2026.
How we support the rollout
The goal is that your team can use Grok Bot without losing control of data, access or co-determination. The steps build on each other, and you decide after each one whether to continue.
Inventory
Which workflows will be demonstrated, which data are visible while doing so, which accounts does the agent need, and who already uses Grok Bot or similar agents today?
Contract and data flows
Together with your data protection officer we compile which plan fits technically, which contract documents the vendor provides for it and what technical information they give on retention, training and processing location. Open points go to your legal counsel as a list of questions.
Accounts and permissions
Dedicated accounts for the agent instead of personal logins, only the permissions the workflow needs, no payments or approvals without confirmation, network controls, sign-out and revocation in place.
Documents for the works council and a policy
A technical description of what is recorded, stored and analysed, as the basis for a works agreement, plus a short usage policy for your team. The legal drafting is done by your legal counsel.
Pilot on a low-risk workflow
One workflow with test data or without personal data, with logging, defined stop criteria and a review before more workflows are added. xAI itself points out that a test run performs real work.
What we do not do
We are not a law firm and do not provide legal advice. We deliver the technical and organisational basis on which your legal counsel, your data protection officer and your works council decide. We do not sell licences for xAI or Cursor and hold no stake in any vendor.
Background
Securing autonomous AI agents
Permissions, approvals, logging and protection against planted instructions apply to every agent, not just Grok Bot. Our practical guide explains the basics.
Read the guide →Rules for AI
AI compliance and governance
When more than one tool is involved: policy, roles and evidence for using AI across the company, aligned with ISO 27001 and the AI Act.
AI compliance and governance →Frequently asked questions about Grok Bot in your company
What is Grok Bot?
Grok Bot is an AI agent from xAI, available in beta since 11 August 2026. It works on a persistent cloud computer with a browser, file system and terminal and completes multi-step tasks there, on request or on a schedule. According to xAI, these computers run in Cursor's cloud.
What is “Teach a task”?
With “Teach a task” you demonstrate a browser workflow to Grok Bot once. According to xAI, up to ten minutes of visible activity is recorded, without microphone audio. The agent turns it into a draft skill that you are meant to review, extend with decision rules and test on a safe example. According to xAI, the feature may be enabled gradually, so it is not necessarily visible in every account yet.
Can we use Grok Bot in our company?
There is no blanket answer. It depends on which data the agent sees, which plan you use and what the terms say about data processing and transfers to the United States. Until that has been checked, no personal data should end up in recordings or tasks.
Does the works council have to agree?
Where there is a works council and employees have their on-screen work recorded, there is a strong case for it. Under German Federal Labour Court case law, it is enough that a system is objectively capable of monitoring performance or behaviour; no intent is required. A works agreement is the usual route. We provide the technical description for it, the legal assessment belongs with your legal counsel.
Where is our data processed?
According to xAI, Grok Bot computers run in Cursor's cloud and currently in the United States. For deletion and return of data, the documentation refers to the data processing agreement of Anysphere, the company behind Cursor, which includes the EU standard contractual clauses. Whether and how that agreement covers Grok Bot for your company is part of the review before rollout.
Where are our credentials stored when Grok Bot signs in?
The signed-in session stays on the cloud computer, and every Bot on the account can use it. The agent should therefore get dedicated accounts with narrow permissions, not employees' personal logins. According to xAI, deleting a Bot does not remove the sessions on the shared computer; they have to be ended deliberately.
How much does Grok Bot cost?
According to xAI, Grok Bot is included in the Premium, Super and Ultra plans of The X Subscription, not in Plus, and in paid Cursor plans. According to xAI, enterprise access is being rolled out gradually. The plans have changed since launch, and xAI publishes the current prices (as of October 2026). For a company rollout, what matters most is which plan comes with the contracts and admin controls you need.
Is Grok Bot available in Germany?
We found no country restriction for the product itself in the Grok Bot documentation (as of October 2026). The only exception xAI names so far is tagging @bot on X, which is not yet available for accounts based in the EU, the United Kingdom, Iceland, Liechtenstein, Norway and Australia.
Do you also advise on other AI agents?
Yes. The same questions arise with any agent that records screens or works with other people's accounts, including comparable features from other vendors. Our advice is vendor-independent, and we will tell you if another tool or classic automation fits better.
Are you affiliated with xAI or Cursor?
No. Blackfort Technology is an independent information security consultancy and is neither a partner nor a reseller of xAI or Anysphere, the company behind Cursor. We do not sell licences for these vendors.
As of 21 October 2026. Grok and Grok Bot are products of xAI, Cursor is a product of Anysphere. Blackfort Technology is not affiliated with either company. The information on Grok Bot is based on xAI’s public documentation and does not replace a review of the current terms. This page is not legal advice.
Before your team records its first workflow
Tell us which workflows Grok Bot should take over. In an initial call we work out what needs to be in place first.