“Sourcegraph does not collect or have access to User Prompts or Responses for customers with an enterprise license who bring their own LLM API key for a self-hosted deployment.”
This analysis describes what Sourcegraph Cody's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Customers meeting all three conditions—enterprise license, own LLM API key, and self-hosted deployment—receive a stronger data isolation guarantee because Sourcegraph Cody has no access to their interaction data.
Interpretive note: All three conditions—enterprise license, own LLM API key, and self-hosted deployment—must be present. The canonical claim states the primary proposition; the conjunctive conditions are preserved within it.
The claim means customers with an enterprise license who bring their own LLM API key for a self-hosted deployment are assured that Sourcegraph Cody does not collect or access their User Prompts or Responses.
How other platforms handle this
If you authorize Facebook Connect, the plug in allows us access to your email address, Facebook friends list, and public profile (including profile picture).
You may set your device permissions to grant Lyft access to your contact lists and direct Lyft to access your contact list ... If you choose to do this, we will access the names and contact information of the people in your address book.
we may receive details such as IP addresses and other identifying data about potential security threats from third parties.
"Sourcegraph does not collect or have access to User Prompts or Responses for customers with an enterprise license who bring their own LLM API key for a self-hosted deployment.Excerpt from Sourcegraph Cody's Cody Enterprise Terms of Use
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Customers meeting all three conditions—enterprise license, own LLM API key, and self-hosted deployment—receive a stronger data isolation guarantee because Sourcegraph Cody has no access to their interaction data.
The claim means customers with an enterprise license who bring their own LLM API key for a self-hosted deployment are assured that Sourcegraph Cody does not collect or access their User Prompts or Responses.
ConductAtlas has identified this type of provision across 286 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Sourcegraph Cody.