AI coding assistants that don’t train on your code (2026)
Which AI coding assistants and IDE copilots train their models on your source code by default — and which ones keep your private repos out of training?
2 of 7 don't train by default · 5 depend on your plan · 0 train by default · last verified 2026-06-01 · how we verify
| # | Tool | Trains on your data? | Opt-out | Zero-retention / DPA | Plan-tier nuance | Verified |
|---|---|---|---|---|---|---|
| 1 | Sourcegraph CodySourcegraph | Doesn’t train on your data | N/A — no training | Zero-retention available | No training on any tier (Enterprise (Sourcegraph Enterprise)). | 2026-06-01 |
| 2 | TabnineTabnine | Doesn’t train on your data | N/A — no training | Zero-retention available | No training on any tier (All plans (Dev / Enterprise / self-hosted)). | 2026-06-01 |
| 3 | Amazon Q DeveloperAmazon Web Services | Depends on your plan | Opt-out | ZDR / DPA on enterprise | Trains on Free tier; not on Pro tier. | 2026-06-01 |
| 4 | Codeium / WindsurfCodeium | Depends on your plan | Opt-out | ZDR / DPA on enterprise | Trains on Individual (Free / Pro); not on Teams / Enterprise. | 2026-06-01 |
| 5 | CursorAnysphere | Depends on your plan | Opt-out | ZDR / DPA on enterprise | Trains on Free / Pro (Privacy Mode OFF); not on Privacy Mode ON (any plan), Business / Teams. | 2026-06-01 |
| 6 | GitHub CopilotGitHub (Microsoft) | Depends on your plan | Opt-out | ZDR / DPA on enterprise | Trains on Copilot Free / Pro / Pro+ (individual); not on Copilot Business / Enterprise. | 2026-05-31 |
| 7 | Replit AIReplit | Depends on your plan | Opt-out | ZDR / DPA on enterprise | Trains on Public Apps; not on Private Apps / paid AI endpoints, Enterprise (ZDR). | 2026-06-01 |
Ranked by privacy posture — tools that never train on your data first. Tap any tool for the per-tier breakdown, opt-out steps and dated sources.
Get notified when this changes
AI data policies shift quietly. Leave your email and we'll alert you when a tool we track changes how it uses your data.
These verdicts are cited public information, not legal or compliance advice. Whether a tool trains on your data — and any zero-retention or DPA option — can depend on your plan, region and contract. Confirm current terms with each vendor before sending confidential or proprietary data.