Analysis · AI, content and the open web

One opt-out for AI training: what the shared robots.txt token changes, and what it does not

On 30 October, OpenAI, Google, Microsoft and Anthropic said they will honour a single robots.txt signal for opting out of AI training. For anyone who publishes content, that is simpler than maintaining a list of crawler names. But rollout is uneven, the companies treat AI answers differently from training, and the signal is voluntary. Here is how to decide whether to use it, and how to check it works.

AnalysisSumanta Mukhopadhyay8 min read6 sources
#news#ai#governance#architecture
ANALYSIS · ANALYSIS · AI, CONTENT AND THE OPEN WEB5 Nov 2026 · 21:20 GST

What was agreed

OpenAI, Google, Microsoft and Anthropic said on 30 October 2026 that they will honour one shared robots.txt token for opting out of AI training, so a single rule can cover all four companies' crawlers; the token is described in an IETF Internet-Draft14. It builds on the IETF's wider work on a shared vocabulary for AI usage preferences5.

The details matter more than the headline. Reporting says Anthropic has begun honouring the token, Microsoft is targeting early 2027 and separates training from grounding with a different tag, Google plans to treat the opt-out like its existing Google-Extended control, which also covers grounding for Gemini answers, and OpenAI has said it aims to implement it in the coming months13. Sources differ on some timings. The signal is voluntary and does not remove content already collected or models already trained2.

Training, grounding and search are three different decisions

The most important practical point is that "AI use" is not one thing. Training puts your content into a model. Grounding fetches your content at answer time and may cite and link you. Search indexing sends people to your site. Opting out of one may or may not affect the others, depending on the company.

Search indexing
Classic resultstraffic to your site
Grounding
AI answers that cite youmay or may not follow the training opt-out
Training
Shared opt-out tokenone rule, four companies, staggered rollout
Enforcement
Voluntary signalsrobots.txt and headersYour edgegateway, bot management, logs
Decide separately for training, grounding and search, then check how each company maps the token to them.

For most businesses, the right answer differs by content type. Marketing pages and documentation usually benefit from being cited in AI answers. Paid research, proprietary datasets and member content usually should not train anyone's model for free. That is the same tiering logic as in what Reddit's logged-in move means for content.

A practical rollout

  1. ClassifyGroup content into discovery, premium and licensed tiers
  2. DecideFor each tier, choose training, grounding and search separately
  3. ExpressAdd the shared token for training opt-outs; keep company-specific rules where needed
  4. EnforceBack premium tiers with sign-in, rate limits and bot management
  5. VerifyMonitor crawler traffic by user agent and path to confirm behaviour
  6. ReviewRecheck as each company's rollout date arrives
The token is one step in a content access policy, not the whole policy.

Keep the old rules for now. Until every company has implemented the shared token, keep existing company-specific crawler rules in place; reporting says those continue to work2.

Do not rely on signals for valuable content. Voluntary signals are honoured by companies that choose to honour them. Content that is your competitive asset needs technical controls at your edge, as described in the front-end controls and gateway patterns elsewhere on this site.

Verify, do not assume. Log requests by user agent and path at your edge or in your traces, and check that crawlers stop fetching opted-out sections after the relevant rollout dates. Enriching traces with request headers makes this a simple filter rather than a log-parsing project6.

Jaeger trace search filtered by a request header attribute, showing a scatter plot of trace durations and a list of matching checkout traces
Filtering traffic by request header: the same technique shows whether a given crawler still fetches opted-out paths. Source: OpenTelemetry blog, Tyler Yahn and Nimrod Avni · CC BY 4.0

A robots.txt line is a request, not a lock. Use it to state your preferences clearly, and use your own infrastructure for anything you cannot afford to lose.

Who should act

  • Publishers, marketplaces and data businesses: decide per content tier now, so the token goes in with a clear policy behind it.
  • B2B SaaS and documentation-heavy companies: think twice before opting out of grounding; being cited in AI answers is increasingly how buyers find you. See structured data for AI search.
  • Regulated organisations in the EU, UK and elsewhere: record your choices; they may matter for copyright and AI transparency discussions. See the Europe page.

CTO take

A single opt-out signal backed by four major AI companies is genuinely useful: it lowers the cost of saying no to training. But it arrives in stages, it does not cover the same things at each company, and it remains voluntary. Treat it as one part of a content access policy that separates training, grounding and search, enforces what matters at your edge, and verifies behaviour with your own data. Read alongside the Reddit analysis and where I work.

How I can help

I help content, marketplace and SaaS businesses design content access policies, edge controls and AI search strategies. I am based in India, the United States and the UAE, working globally. See fractional CTO work or analyse your challenge and bring the result to a call.

References
  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
FAQ

Common questions

What did the four companies agree?

On 30 October 2026, OpenAI, Google, Microsoft and Anthropic said they will honour one shared robots.txt token for opting out of AI training, described in an IETF Internet-Draft. Rollout timing differs by company.

Does the token stop my content appearing in AI answers?

Not necessarily. Reporting says Microsoft separates training from grounding with a separate meta tag, while Google plans to treat the shared opt-out like its Google-Extended control, which also covers Gemini grounding. Check each company's documentation for your goals.

Does it remove content already used for training?

No. Coverage notes the signal is voluntary and applies going forward; it does not remove data already collected or change models already trained.

Keep reading

Related

Open to advisory, fractional CTO & select builds

Let's talk about what you're building.

The fastest route is a free 30-minute call. Prefer to write? Send a message and I'll reply personally within two business days.

Start a conversation

How would you like to reach me?

Book a 30-min callFastest. Pick any open slot on my calendar.→ Write in GmailOpens a pre-filled draft in your browser.→ Use my email appOutlook, Apple Mail or your default client.→

I reply personally within two business days. Time zones from the Americas and Europe to the Middle East and Asia-Pacific.