GitHub Copilot
GitHub / Microsoft · Coding assistant
Ayliea's assessment: Medium RiskAyliea recommends: ApproveIn Ayliea's curated list
Verified . Risk classification and recommended policy are Ayliea's subjective assessments — not vendor certifications.
- Data residency
- United States
- Zero retention available
- Yes (commercial / Enterprise tier)
- Certifications
- SOC 2 Type II, ISO 27001
Why this rating
Business / Enterprise tiers offer organization-level controls, telemetry opt-out, and exclude prompts from training. Individual tier has weaker default protections.
Considerations before deploying
- Use Business or Enterprise tier for any organizational deployment
- Configure org policy to block public-code suggestions matching license-encumbered repositories
- Disable telemetry collection where IP-sensitive
Sources
- GitHub Trust Center (github.com)
- Copilot Privacy (docs.github.com)
Want this for every tool on your network?
Ayliea finds every AI tool your team is actually using and applies your policies automatically.