Back to Directory
HIGH RISK

Windsurf

US-East (AWS) ·Engineering
OVERALL RISK SCORE 75/100
SOC 2Not Certified
GDPRNot Certified
Trains on User DataYES — HIGH RISK
Enterprise TierAvailable
Data Retention30 Days
Data ResidencyUS-East (AWS)

Risk Summary

Codeium's AI IDE transmits code context to proprietary models. Enterprise tier offers zero-retention and SSO but lacks SOC 2 certification. Cascade feature reads full project context by default.

Technical Briefing

Windsurf (by Codeium) sends active file context and project structure metadata to Codeium's inference servers on AWS us-east-1.

VULNERABLE TOOL DETECTED

Windsurf carries a high enterprise risk profile. Our recommended secure alternative is GitHub Copilot Enterprise (compartmentalised by repo).

Run an automated statement check →