Is Snyk safe with your data?
Snyk
Snyk Ltd.
Partial disclosure · high confidence
Snyk earns a C (58/100) because it discloses its data practices only in part.
#64
of 211 apps ranked
58
score · Security & compliance avg 47
+11
vs category average
Snyk publicly commits that customer inputs are not used to train its AI models and gives users ownership of outputs, but its retention period is vague, it admits selling or sharing data for advertising, and it names no security certification or specific technical controls.
What Snyk's privacy policy and terms of service say about your data
No training on inputs
The MSA states Snyk will not use, or permit affiliates or sub-processors to use, any Inputs to train, enhance or improve AI Models in the Services, and the customer remains sole owner of Customer Data, Code Assets and Outputs.
Sells or shares for advertising
The privacy notice says Snyk may share or sell personal information for third-party advertising purposes, with opt-out via a cookie manager, a universal opt-out signal, or email.
Vague retention, no AI-log period
Retention is described only as "as long as reasonably necessary" with no number, and no shorter retention period is stated for AI logs or prompts.
Security detail sits off-page
Breach notice is a concrete 72 hours, but technical controls are only referenced through a linked Information Security Addendum and no certification such as SOC 2 or ISO 27001 is named in the fetched text.
What the policy is silent or vague on
- Not stated: a way to opt out of training
- Not stated: shorter retention for AI conversation logs
- Only partial: whether training use differs by plan
- Only partial: a right to access your data
Snyk privacy rating
Details
- Category
- Security & compliance
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2024-03-01
- Region scored
- Global / US-default
- Last assessed
- 2026-08-13
Documents examined
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.