Google, OpenAI, Anthropic and Microsoft Back AI Training Opt-Out
A new IETF-backed robots.txt signal, authored by Anthropic engineer Kevin Kelley, lets publishers block AI training across multiple companies at once — rollout dates vary widely.

Google, OpenAI, Anthropic and Microsoft all said on October 30, 2026 that they will honor a new shared robots.txt signal that lets website publishers opt out of having their content used to train generative-AI models with a single directive, instead of maintaining separate rules for every crawler. The mechanism, formally titled "Machine-Readable Training Preference Signal," comes from an individual Internet-Draft filed at the IETF by Kevin Kelley, Anthropic's technical lead on AI standards work. It does not undo any scraping that has already happened, and it has no effect on whether a site appears in search results or rankings — it only governs future crawling done to train AI models.
- Draft:
draft-kelley-aipref-training-preference-signal-00, authored by Kevin Kelley (Anthropic), published October 30, 2026, under the IETF's AI Preferences (AIPREF) working group. - Mechanism: a
User-Agent: __usage_ai-trainingblock in robots.txt, with ordinaryAllow/Disallowpaths — no new syntax beyond RFC 9309. - Rollout: Anthropic has started implementing it; OpenAI says "the coming months"; Google and Microsoft both target 2027, with Microsoft naming February 1, 2027.
- Scope: training only. It does not touch search indexing, ranking, or past scraping.
- Microsoft is additionally splitting "training" from "grounding" (use in live AI answers) as two separate, independently settable preferences.
What happened on October 30
Google's Search Central Blog, Microsoft's Bing blog, and OpenAI's own site all published statements within the same window on October 30, 2026, each saying the company would support the same new preference token in robots.txt. Anthropic did not publish a dedicated blog post; its most direct public statement came from Kevin Kelley himself, posting to the IETF's "ai-control" mailing list the same day to introduce the draft he had just filed.
Google's post, written by Search Advocate John Mueller, put it plainly: "Today, we're announcing our plans to support a shared AI training control in robots.txt. This will help websites express their AI training preferences across multiple AI providers in a single step and is based on work from the AIPREF working group at the Internet Engineering Task Force (IETF)." Google said the new token builds on Google-Extended, the company-specific AI training control it has offered since 2023, and that if a site opts out using the new shared token without separately mentioning Google-Extended, Google "plans to interpret that as if the publisher had disallowed Google-Extended."
OpenAI's post framed the move the same way: a single preference that multiple AI providers can read, rather than separate rules per crawler, with the company saying it "encourages other AI providers to honor the signal" and that it plans to implement support "in the coming months." Microsoft's Bing blog post, written by Principal Product Manager Krishna Madhavan, went furthest on specifics, laying out exact dates and a second, related control covering how content is used inside AI-generated answers (see below).
How the signal actually works
The draft adds no new robots.txt grammar. It reuses the existing RFC 9309 group structure, longest-match path rules, and Allow/Disallow directives that have governed crawler access for decades — it just defines a new, purpose-specific token to put on the User-Agent line: __usage_ai-training. A publisher writes an ordinary-looking robots.txt group keyed to that token, for example blocking training on the whole site but carving out an exception for a press kit:
| Robots.txt line | What it means |
|---|---|
User-Agent: __usage_ai-training | Starts a group that applies only to the AI-training preference, not to ordinary crawling |
Disallow: / | Expresses a preference against AI training on every page by default |
Allow: /press-kit/ | Carves out an exception, expressing a preference in favor of training on that one path |
Any crawler that recognizes the token checks a requested path against the group using the same lookup rules already defined in RFC 9309. A disallowed result means the publisher has expressed a preference against that use; an allowed result means the opposite. The draft explicitly notes that wildcard User-Agent: * groups do not match this token, so general crawler rules and the new training-specific preference stay independent of each other. The draft also allows that private agreements between a publisher and an AI company may override what robots.txt says — so a licensing deal can still supersede the default signal.
What it does not do
Two limits are worth stating clearly, because they are the parts easiest to misread as a blanket "AI opt-out." First, the signal is forward-looking only: the draft ties the preferences that apply to a given page to whatever robots.txt said "in effect when the asset was retrieved," meaning it cannot reach back and erase content a company already scraped and trained on before a publisher ever set the flag. Second, none of the four companies' statements connect this to search visibility. Google's post, Microsoft's post, and the underlying draft all keep the training preference separate from crawling for search indexing — disallowing AI training does not pull a page out of Google Search, Bing, or any other index.
How each company's rollout differs
The companies agree on the mechanism but not on the calendar, and Anthropic, Google, OpenAI and Microsoft are each at a different stage:
| Company | Stated timeline | Notes |
|---|---|---|
| Anthropic | Implementation already underway (per Kelley's Oct. 30 mailing-list post) | Kelley wrote that Anthropic "has already started implementing support for this draft," calling it complementary to its existing crawler controls, but cautioned it will "take us some time to add support across our services." |
| OpenAI | "The coming months" | Existing GPTBot/robots.txt controls remain in effect in the meantime; OpenAI gave no fixed date. |
| 2027 | Will treat an unspecified opt-out under the shared token as equivalent to disallowing Google-Extended, unless a site states Google-Extended rules separately. | |
| Microsoft / Bing | Takes effect February 1, 2027; publishers must publish preferences by March 1, 2027 | Most detailed public timeline of the four; also opens a transition window in Bing Webmaster Tools starting December 15, 2026 for sites currently using NoArchive/NoCache. |
Microsoft's second control: training vs. grounding
Microsoft's announcement went beyond the shared training token to introduce a second, independent preference it calls "grounding" — covering whether a publisher's content can be used as live input to produce an AI-generated answer (in Copilot, AI Mode, or AI Overviews), as distinct from being baked into a model's training data. Grounding preferences are set at the page level only, through a meta tag or X-Robots-Tag header such as ai-training:disallow or ai-grounding:disallowextended, and support three values: Allow, DisallowExtended (restricting grounding to Microsoft's own surfaces and excluding third-party grounding services), and Disallow. Both default to Allow when a publisher sets nothing. As Madhavan put it in the Bing post: "Publishers should not have to choose between being discoverable in Bing and deciding how generative models use their work." Microsoft also stressed, twice, that neither setting is a guarantee: "Neither choice guarantees inclusion, traffic, or payment."
Microsoft's timeline is also the most concrete of the four. The new preferences take effect as Bing recrawls sites starting February 1, 2027; publishers have until March 1, 2027 to publish a preference (and, for grounding, to record any temporary preference in Bing Webmaster Tools); and a temporary grounding-transition window for sites currently relying on NoArchive or NoCache opens December 15, 2026 and expires September 30, 2027. Microsoft notes that publishing a new setting does not take effect immediately — it only applies once Bing actually recrawls the page, and pinging IndexNow can prompt but not guarantee a recrawl.
Who is behind the draft
The draft itself credits a broader group than the four companies that announced support on October 30. Its acknowledgments section lists contributors affiliated with Google, Microsoft, OpenAI, Cloudflare and Meta, in addition to author Kevin Kelley of Anthropic — signalling that the token was shaped with input well beyond the companies that have so far committed to specific rollout dates. The work sits under the IETF's AI Preferences (AIPREF) working group, which separately maintains a broader vocabulary draft, draft-ietf-aipref-vocab, led by Paul Keller of Open Future and edited by Mozilla's Martin Thomson — a document Google's own post describes as still under "multistakeholder discussions" rather than finished. Kelley's narrower draft was deliberately scoped to just the training signal and its robots.txt syntax, rather than waiting for that fuller vocabulary effort to conclude.
Google's post also tied the move to regulatory context, saying the proposal "is consistent with the EU Code of Practice for General Purpose AI (GPAI) Model Providers under the EU AI Act that recognizes robots.txt as a primary method for web publishers to express machine-readable preferences," and that the draft reflects "feedback from publishers, civil society groups, regulators and other stakeholders that have called for industry-wide controls on AI training."
Why a shared token matters
Since generative AI crawlers began scaling up, publishers have had to maintain a growing patchwork of company-specific rules — disallowing GPTBot for OpenAI, Google-Extended for Google's Gemini training, ClaudeBot for Anthropic, and so on — each with its own syntax quirks and its own crawler name to track. A single purpose-coded token collapses that into one line that any participating company's crawler can read the same way, while still letting a publisher layer company-specific exceptions on top if they want more granular control. That is also why this is being pursued as an IETF draft rather than a private agreement between a couple of companies: a standards-track document, even an individual one not yet adopted by the IETF as a whole, gives any crawler operator — not just the four named here — a stable, documented syntax to implement against.
It is a narrower move than it might sound, though. None of the four companies' statements suggest the signal resolves ongoing legal disputes over AI training on previously published content, and the draft's own text allows private licensing agreements to override it anyway. For publishers that have already struck or are negotiating direct licensing deals with AI companies, this is a technical complement to those agreements, not a replacement for them. The AI industry's broader shift toward structured training-data agreements is visible elsewhere too — OpenAI's own infrastructure deal with Google Cloud is a reminder that even competitors are increasingly formalizing how they share resources and data, and OpenAI's earlier move away from training directly on the live internet shows training-data sourcing has already been shifting before this standard existed.
Open questions going into 2027
A few things remain unsettled. The draft is still an individual submission rather than an IETF working-group product, meaning it has not gone through the IETF's formal consensus and standardization process — it currently expires on May 3, 2027 unless renewed or adopted. Google, OpenAI and Microsoft have each committed to honoring the token, but none has published the detailed engineering specifics of how its crawlers will parse edge cases, and enforcement remains voluntary: robots.txt has always been an access-preference protocol that crawlers can choose to respect, not a technical barrier. Meta and Cloudflare are credited as contributors to the draft's development but have not themselves announced rollout dates.
What happens next
Watch Anthropic's own crawler documentation for the first concrete sign of support landing in production, since Kelley's mailing-list post said only that implementation has begun, not that it is complete. OpenAI has given itself "the coming months" with no fixed date, so its first implementation announcement is the next milestone to track there. Google and Microsoft have both pointed to 2027, with Microsoft's February 1, 2027 enforcement date and March 1, 2027 publisher deadline the most concrete dates on the calendar for publishers to prepare robots.txt changes around. Expect further detail to emerge from the IETF's AIPREF working group as the broader vocabulary draft continues through its own standardization process, and watch for whether other large crawler operators — beyond the group credited in the draft's acknowledgments — adopt the same token in the months ahead.
Frequently asked questions
What is the new AI training opt-out signal?
It's a shared directive that publishers can add to robots.txt, using a User-Agent: __usage_ai-training block with Allow/Disallow paths, to express a single preference against having content used for AI training that multiple companies can read at once, instead of needing a separate rule for each crawler.
Does opting out remove my site from Google or Bing search results?
No. Google, Microsoft and the underlying IETF draft all state that the training preference is separate from search indexing and ranking. Disallowing AI training under the new token does not affect whether a page appears in search results.
Does it undo AI training that has already happened?
No. The draft ties the preference that applies to a page to whatever robots.txt said at the time that page was retrieved, so it has no retroactive effect on content already scraped and used for training before a publisher set the flag.
When will each company actually start honoring it?
Rollout differs: Anthropic says it has already started implementing support; OpenAI says implementation is coming “in the coming months” with no fixed date; Google and Microsoft both point to 2027, with Microsoft naming February 1, 2027 as when the new preferences take effect.
How is this different from disallowing GPTBot or Google-Extended today?
Those are company-specific crawler names a publisher must list individually. The new __usage_ai-training token is purpose-coded rather than company-coded, so any participating crawler can read the same line, while publishers can still layer company-specific exceptions like Google-Extended on top for finer control.
What's the difference between Microsoft's “training” and “grounding” controls?
Training covers using content to modify a model's learned parameters. Grounding covers using content as live input to produce an AI-generated answer, such as in Copilot or AI Overviews. Microsoft treats them as independent settings, so a publisher can block training while still allowing grounding, or vice versa.
Sources
- Google Search Central Blog - Supporting a shared AI training control for websitesdevelopers.google.com
- OpenAI - Making it easier for websites to express AI training preferencesopenai.com
- Microsoft Bing Blog - Your Content, Your Choice: Clearer Preferences for Training and Groundingblogs.bing.com
- IETF Internet-Draft - Machine-Readable Training Preference Signal (draft-kelley-aipref-training-preference-signal-00)datatracker.ietf.org
- IETF ai-control mailing list - Kevin Kelley announces the draftmailarchive.ietf.org
- IETF AIPREF Working Group - draft-ietf-aipref-vocabdatatracker.ietf.org
Theo Park runs the AI desk at Pandromeda. He follows model launches from the frontier labs and the open-weight community, tracks the assistants and developer tools built on them, and explains what each release changes on pricing, capability and safety. His reporting leans on primary sources: model cards, technical reports, API documentation and the companies' own announcements.

