Sourcery is a platform that automates the sourcing of candidates for recruitment, helping HR teams streamline their hiring process and find qualified talent efficiently.
Sourcery is an AI-powered code reviewer that automates in-depth analysis of GitHub pull requests, delivering instant feedback, high-level summaries, line-by-line suggestions, and actionable improvements to enhance code quality and catch bugs or vulnerabilities early.[1][3][7] Its core value lies in reducing technical debt, simplifying complex logic, and promoting best practices, allowing developers to focus on creative problem-solving rather than manual reviews.[3][5]
Key features include real-time IDE integrations, AI-driven refactoring, security scanning, multi-language support, customizable rules, and seamless connections with tools like GitHub, Slack, and Jira for continuous analysis and automated fixes.[3][4][5] Designed for software engineering teams, individual developers, and DevOps groups—from solo coders onboarding new hires to enterprises managing large codebases—Sourcery excels in use cases like automated code reviews, pull request optimization, and maintaining secure, maintainable projects.[2][6]
What sets Sourcery apart is its hybrid AI approach combining large language models for contextual understanding with proprietary static analysis for precise, low-false-positive detection, plus privacy-focused options like zero-retention and SOC 2 certification.[4][8]
Sources
Sourcery explicitly states it does not use code for training and LLM providers have no-training policies. However, messa
No training opt-out mechanism was identified in the legal documents.
Moderate risk. Suitable for internal data but avoid confidential information.
Sourcery explicitly states it does not use code for training and LLM providers have no-training policies. However, message data from the Coding Assistant is collected to improve responses, creating moderate concern about what constitutes 'improvement' and whether aggregated insights could indirectly inform model training.
“[Privacy] 'We collect message data (but not your code) to allow us to improve the quality of our responses.' [Privacy] 'All LLM providers we work with do not use any of your code or messages to train their models.'”
Both free and pro tiers explicitly state that user input code and generated output code remain the user's IP, with Sourcery claiming no rights to outputs. The license is strictly limited to service delivery.
“[ToS] 'Your input code and messages and any output code generated by Sourcery remain your IP. Sourcery does not have a claim to any of the output code generated by our Coding Assistant or as part of a Code Review.'”
Sourcery shares data with essential service providers (Auth0, Stripe, Google Analytics, Langsmith, Mixpanel, Sentry) under documented subprocessor agreements. However, the DPA does not explicitly state that all subprocessors have equivalent data protection obligations, and analytics data sharing creates moderate concern.
“[DPA] 'All Subprocessors will comply with terms no less stringent than those set forth in this Agreement.' [DPA] Lists: Auth0, Google Analytics, Langsmith, Mixpanel, Sentry, Stripe as subprocessors.”
The DPA clearly states that upon service termination, all client personal data will be deleted promptly unless required by law. Code is explicitly not retained by Sourcery, and LLM providers retain data for maximum 30 days with zero-retention options available.
“[DPA] 'Upon termination of the Services, all Client Personal Data will be deleted promptly unless required by law.' [Privacy] 'All LLM providers we work with do not use any of your code or messages to train their models and do not store any of your data for more than 30 days.'”
Sourcery explicitly disclaims any ownership or rights to user-generated outputs in both free and pro tiers. Users retain full IP ownership of both input code and generated outputs.
“[ToS] 'Your input code and messages and any output code generated by Sourcery remain your IP. Sourcery does not have a claim to any of the output code generated by our Coding Assistant or as part of a Code Review.'”
The DPA references GDPR compliance and the Privacy Policy mentions GDPR and EU-US Privacy Shield compliance for Sentry. However, no SOC 2, ISO 27001, or HIPAA certifications are mentioned, and no dedicated security/trust page is referenced.
“[Privacy] 'Anonymised error reports provided by the third-party Sentry.io error reporting service, which is fully GDPR and EU-US Privacy Shield compliant.' [DPA] References 'Data Protection Laws' and GDPR compliance obligations.”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai