Cody
Sourcegraph · Coding agent · US · sourcegraph.com/cody
services/cody.yamlVendor data-handling terms
Training use of code is governed by the customer agreement rather than the public policy.
“We process User Content to provide and improve the Services as described in our customer agreements.”
“We retain each category of personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, tax, audit, and accounting obligations, resolve disputes, and enforce our agreements.”
“Our servers and operations are located in the United States, and we have team members located around the world. / If you access our Website or Services from outside the United States, your personal data will be transferred to, stored, and processed in the United States and potentially in other countries where our teammates are located.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| sourcegraph.com | app | observed |
| meetcody.ai | app | observed |
Assessment
Reasoning: A coding assistant with repository-wide context: it reads the codebase, not only the open file. The public policy defers training terms to customer agreements and places processing in the United States. For a cloud deployment the exposure is the whole repository; self-hosted enterprise deployments keep code in-house and are outside these terms.
Flags: Training terms in customer agreement, not public · GDPR Chapter V (US servers) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Processing, retention, and transfer terms verified against the Sourcegraph privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.