Back to Directory
MODERATE RISK

GitHub Copilot

Global (Azure) ·Engineering
OVERALL RISK SCORE 60/100
SOC 2Compliant
GDPRCompliant
Trains on User DataNo
Enterprise TierAvailable
Data RetentionZero Retention
Data ResidencyGlobal (Azure)

Risk Summary

Microsoft's code completion tool operates on a zero-retention model for enterprise customers. SOC 2 and GDPR compliant. The principal concern is code similarity to public repositories and accidental suggestion of GPL-licensed snippets.

Technical Briefing

GitHub Copilot Business and Enterprise tiers disable prompt retention and model training on customer code.. Telemetry collection can be disabled via admin policies.