Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“Limit of Liability for breach of confidentiality or data security If you have uncapped liability for breach of confidentiality or data security in your Agreement with Sourcegraph, a limit of liability of five times (5x) your annual license fees will apply to breaches of confidentiality or data security in connection with your use of Cody.”
“In the event of a conflict between this Cody Terms of Use ("Cody Terms") and the terms that govern your order form ("Terms"), the terms of the Cody Terms prevail.”
“Sourcegraph uses Customer Content solely to provide the service and not for product improvement purposes.”
“As between the parties, you own all inputs to and outputs generated by your use of Cody.”
“Sourcegraph will indemnify you against any claims alleging that your use of Cody or any Cody outputs infringes third-party intellectual property rights in accordance with the indemnification terms in your agreement.”
“Sourcegraph does not collect or have access to User Prompts or Responses for customers with an enterprise license who bring their own LLM API key for a self-hosted deployment.”
Sourcegraph Cody's privacy and usage terms establish that you own your prompts and outputs, and Sourcegraph will not use your code to train AI models. If a third party claims your use of Cody infringes their intellectual property, Sourcegraph will cover that claim, with no cap on that coverage if you use a signed Order Form and the current version with Sourcegraph's provided filters. However, if you use your own LLM relationship with Cody, some of Sourcegraph's data and retention commitments may not apply to you.
This document establishes the substantive data, intellectual property, and liability framework governing customer use of Sourcegraph Cody. It allocates ownership of all inputs and outputs to the customer, restricts Sourcegraph's use of Customer Content solely to service delivery, and commits Sourcegraph Partner LLMs to zero retention of inputs, outputs, and embeddings beyond the time required to generate a response. Sourcegraph Cody provides IP indemnification for third-party infringement claims, which is uncapped for customers who have signed an Order Form and use the current version with provided filters, while liability for confidentiality or data security breaches is capped at five times the customer's annual license fees. Data isolation guarantees are strongest for enterprise customers who self-host with their own LLM API key, and Sourcegraph's training and retention commitments may not apply when a customer brings their own LLM relationship.
As an individual user, your prompts and outputs belong to you, and Sourcegraph Cody will not use your code to improve its products or train models. If your organization enables the embeddings feature, a copy of your repository contents is shared with a third-party LLM provider, though that provider retains nothing beyond the time needed to generate a response. If you are an enterprise user who self-hosts Cody with your own LLM API key, Sourcegraph Cody does not collect or access your prompts or responses at all. If your organization uses its own LLM relationship, you should verify which of Sourcegraph's data commitments still apply to your deployment, as some may not.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“Limit of Liability for breach of confidentiality or data security If you have uncapped liability for breach of confidentiality or data security in your Agreement with Sourcegraph, a limit of liability of five times (5x) your annual license fees will …”
“In the event of a conflict between this Cody Terms of Use ("Cody Terms") and the terms that govern your order form ("Terms"), the terms of the Cody Terms prevail.”
“Sourcegraph uses Customer Content solely to provide the service and not for product improvement purposes.”
“As between the parties, you own all inputs to and outputs generated by your use of Cody.”
“Sourcegraph will indemnify you against any claims alleging that your use of Cody or any Cody outputs infringes third-party intellectual property rights in accordance with the indemnification terms in your agreement.”
“Sourcegraph does not collect or have access to User Prompts or Responses for customers with an enterprise license who bring their own LLM API key for a self-hosted deployment.”
“Sourcegraph and Sourcegraph Partner LLMs do not use code from Cody Enterprise or Cody Pro teams to train models.”
“You may not use Cody for unlawful purposes or in violation of our Acceptable Use Policy.”
“when an administrator turns on the feature to generate embeddings for a repository, a copy of the repository contents will be shared with a third-party LLM provider for the sole purpose of providing you the service.”
“The following Sourcegraph commitments may not apply if you use your own LLM relationship in conjunction with Cody: Any representations regarding data used to train the LLM Any representations regarding data retent...”
“Sourcegraph's indemnification obligation is uncapped if you have signed an Order Form with us and you use the most current version available and any filters provided by Sourcegraph.”
“Sourcegraph Partner LLMs will not retain any input or output from the model, including embeddings, beyond the time it takes to generate the output ("Zero Retention").”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle 5x Annual Fee Cap for Confidentiality Breach and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.