GitHub Copilot Business Privacy Statement

This document is the GitHub Copilot Trust Center, a publicly accessible compliance and transparency disclosure page hosted on Vanta's trust center platform, governing the security, privacy, and compliance posture of GitHub Copilot products. The page discloses that GitHub Copilot holds certifications including SOC 1, SOC 2, SOC 3, ISO 27001:2013, ISO/IEC 42001:2023, CSA STAR Level 2, and TISAX, and makes available audit reports and bridge letters for enterprise customers who request access. The document functions primarily as a vendor trust disclosure rather than a binding privacy policy or terms of service, meaning it does not itself assert user rights, data processing obligations, or contractual commitments; the underlying GitHub Privacy Statement and GitHub Customer Agreement govern those relationships. The compliance certifications listed engage frameworks including ISO/IEC 27001 for information security management and ISO/IEC 42001 for AI management systems, which may be relevant to enterprise procurement teams evaluating GitHub Copilot under GDPR Article 28 processor obligations or EU AI Act conformity assessments. Material compliance considerations depend on whether the enterprise customer has executed a Data Protection Agreement with GitHub and whether the specific Copilot product tier used falls within the scope of the disclosed certifications.