Sourcegraph
Sourcegraph enables developers and AI coding agents to understand and navigate complex codebases through deep search, lightning-fast code search across repositories, and AI-powered insights. The platform integrates with GitHub, GitLab, Bitbucket, and other code hosts, offering enterprise-scale capabilities like batch changes across billions of lines of code, vulnerability monitoring, and a Model Context Protocol server for coding agents like Claude and Cursor. Trusted by companies including Stripe, Uber, Dropbox, and Booking.com, Sourcegraph provides SOC2 Type II compliance and zero data retention for LLM inference.
Sourcegraph is a code understanding platform designed for both human developers and AI coding agents to navigate and comprehend large, complex codebases at enterprise scale. The platform combines deep search capabilities with lightning-fast code search across hundreds or millions of repositories, supporting major code hosts including GitHub, GitLab, Bitbucket, Gerrit, and Perforce. Core features include Deep Search for agentic AI context retrieval, Batch Changes for search-and-replace operations across billions of lines of code, Code Monitors for vulnerability detection and bad practice identification, and the Sourcegraph Model Context Protocol server that integrates with coding agents like Claude and Cursor to improve accuracy on legacy systems. The platform distinguishes itself through enterprise-grade security with SOC2 Type II and ISO27001 compliance, zero data retention for LLM inference, and administrative controls including SCIM user management, SSO, and role-based access control. Trusted by companies including Stripe, Uber, Dropbox, Palo Alto Networks, and Atlassian, Sourcegraph offers both self-hosted and cloud deployment options with enterprise pricing.
Sourcegraph uses user content to improve services and train models. They process prompts through service providers and c
No training opt-out mechanism was identified in the legal documents.
High risk across multiple dimensions. Only use with public, non-sensitive data.
Sourcegraph uses user content to improve services and train models. They process prompts through service providers and collect usage data for product improvement, but explicitly state they don't intentionally collect personal information from repositories. However, the broad use of data for 'product development' and AI model improvement creates moderate risk.
“We use your Personal Information for our legitimate interests, such as security, abuse, and fraud prevention, product improvement, and communications about your use of our Services.”
The provided text doesn't explicitly detail the license terms for user-generated content or outputs. The privacy policy references Terms of Service for specifics, but the excerpt provided doesn't contain comprehensive licensing language. This creates moderate uncertainty about content ownership and usage rights.
“Content you post, add, receive, or share on our hosted services, and any payment information.”
Sourcegraph shares data with multiple third parties including service providers, advertisers (in Amp Free Mode), law enforcement, and in merger scenarios. They share aggregated data broadly and service providers have access to user content and prompts. This represents significant third-party sharing risk.
“Our service providers process your Personal Information as needed to provide our Services to you, including your content and processing prompts to help you write code.”
Sourcegraph allows users to delete accounts and personal information, but retains data for contractual obligations, legal compliance, tax, audit, and dispute resolution. The retention period is indefinite for these purposes, creating moderate risk for long-term data persistence.
“Sourcegraph will retain your information for as long as your account is active or as needed to perform our contractual obligations, provide you services, to comply with tax, legal, and audit obligations, resolve disputes, preserve legal rights, or enforce our agreements.”
The provided text doesn't explicitly address IP ownership of user-generated content or AI outputs. The privacy policy references Terms of Service for these details but doesn't include the relevant excerpts. This creates moderate ambiguity about ownership rights.
“Capitalized terms that are not defined in this Privacy Policy have the meaning given to them in our Terms of Service.”
Sourcegraph mentions GDPR compliance, EU data rights, and references a security portal, but the provided text doesn't explicitly list SOC2, HIPAA, or ISO certifications. They claim to implement security controls but don't detail specific compliance certifications, creating moderate uncertainty.
“We secure your information by implementing technical and organizational security controls that you can read about in Security is core to everything we do.”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai