Is Sourcegraph Cody safe with your data?
Sourcegraph Cody
Sourcegraph, Inc.
Good disclosure · high confidence
Sourcegraph Cody earns a B (74/100) because it discloses most of its data practices.
#23
of 116 apps ranked
74
score · Coding avg 53
+21
vs category average
Sourcegraph's controller-level privacy policy is strong on data-subject rights, transparency, and sharing limits, and it commits not to extract, store, or use personal data from user code for any purpose. It loses points for vague retention language, no named security controls or certifications, and no breach-notification timeline.
What Sourcegraph Cody's privacy policy says about your data
Code is not used for training
The policy says Sourcegraph does not intentionally extract, store, or use personal data from User Content for any purpose, that analytics and usage data exclude code, and that work product is owned by your organization.
Full rights with a defined response window
Access, portability, correction, deletion, restriction, and objection are all granted, and verified requests are answered within one month, with a possible extension of up to two further months.
No sale and a named transfer safeguard
The policy states Sourcegraph does not sell or share personal data for cross-context behavioral advertising and relies on Standard Contractual Clauses approved by the European Commission and the UK ICO for transfers to the United States.
Vague retention and thin security detail
Retention is described only as as long as reasonably necessary, security is framed as appropriate technical and organizational measures with no named controls or certifications, and there is no breach-notification clause.
What the policy is silent or vague on
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: shorter retention for AI conversation logs
- Not stated: breach notification
Sourcegraph Cody privacy rating
Details
- Category
- Coding
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-06-12
- Region scored
- Global / US-default
- Assessed
- 2026-06-20
Other coding apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.