AI code review tool that analyzes code changes and provides intelligent feedback. Improves code quality through automated review processes.
CodeRabbit uses AI to review pull requests and identify potential issues, improvements, and best practices. The tool integrates with development workflows to provide real-time feedback. Valuable for development teams seeking to maintain code quality and reduce manual review time.
CodeRabbit explicitly states in Section 3.3 of ToS that neither CodeRabbit nor OpenAI/Anthropic uses customer code to tr
No training on user data means no opt-out is necessary.
Low risk across data training, licensing, and sharing dimensions.
CodeRabbit explicitly states in Section 3.3 of ToS that neither CodeRabbit nor OpenAI/Anthropic uses customer code to train AI models, with a zero data retention policy. Privacy Policy further confirms no training on personal information for code reviews, though OSS projects are used for training.
“[ToS 3.3] Neither CodeRabbit nor OpenAI or Anthropic uses Customer's code to train any AI models. CodeRabbit has a zero data retention policy with both OpenAI and Anthropic.”
Section 6.2 of ToS clearly assigns all rights in Output to Customer. CodeRabbit retains no ownership of generated outputs and explicitly disclaims any rights to customer-generated content, limiting its own use to service improvement and legal compliance.
“[ToS 6.2] CodeRabbit hereby assigns to Customer all of its rights, title and interest (if any) in and to the Output. Customer agrees that CodeRabbit may use Output to (a) provide, maintain, protect and improve the Services; (b) comply with applicable law; and (c) enforce this Agreement.”
While CodeRabbit shares data with essential service providers (OpenAI, Anthropic, Stripe, etc.) under documented agreements, the DPA lists 15+ sub-processors including analytics (Datadog, PostHog) and marketing tools (HubSpot, Growsurf). Sub-processor list is published but some sharing (e.g., Growsurf for referral programs) extends beyond core service delivery.
“[DPA Annex III] Sub-processors include Datadog (IT Infrastructure), PostHog (Analytics), HubSpot (CRM), Growsurf (referral program), and others. [Privacy] We share information with Service Providers and Service Integrations including OpenAI and Anthropic for code reviews.”
Privacy Policy states retention is based on relationship duration and legal requirements but lacks specific timeframes. DPA Section 13.1 requires deletion within 30 days of agreement termination, but ToS Section 3.1 notes data may be deleted without notice. Backup retention and residual data handling are vague.
“[Privacy 12] We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required by law. [DPA 13.1] Processor shall return or delete Personal Data within thirty (30) days from end of Agreement.”
Section 6.2 of ToS explicitly assigns all rights, title, and interest in Output to Customer with no restrictions on commercial use. CodeRabbit claims no ownership or license rights to generated outputs, providing clear IP protection for enterprise users.
“[ToS 6.2] CodeRabbit hereby assigns to Customer all of its rights, title and interest (if any) in and to the Output. The Services may provide the same or similar Output to others, and CodeRabbit's assignment to Customer in the preceding sentence does not apply to any outputs resulting from other users' use of the Services.”
DPA Annex II documents ISO/IEC 27001:2022 compliance and SOC 2 Type II certification. Privacy Policy confirms SOC2 Type II, GDPR, and HIPAA compliance for data storage. DPA includes detailed technical and organizational security measures, audit rights, and Standard Contractual Clauses for international transfers.
“[DPA Annex II] CodeRabbit operates an information security management system that complies with ISO/IEC 27001:2022 standard. [Privacy 12] The data storage is compliant with SOC2 Type II, GDPR, and HIPAA regulations.”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai