This analysis describes what Sourcegraph Cody's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Customers meeting all three conditions—enterprise license, own LLM API key, and self-hosted deployment—receive a stronger data isolation guarantee because Sourcegraph Cody has no access to their interaction data.
Interpretive note: All three conditions—enterprise license, own LLM API key, and self-hosted deployment—must be present. The canonical claim states the primary proposition; the conjunctive conditions are preserved within it.
The claim means customers with an enterprise license who bring their own LLM API key for a self-hosted deployment are assured that Sourcegraph Cody does not collect or access their User Prompts or Responses.
How other platforms handle this
authorize ZipRecruiter to connect your account to the account of a "Connected Site" (e.g., Google, LinkedIn, Monster, Facebook or Twitter), we may be able to access information you have provided to the Connected Site...
telemetry information collected includes: (i) microservice settings, (ii) usage data and (iii) hardware environment.
Some of our ad partners may also enable us to collect similar data directly from their website or app by integrating our or our affiliates' advertising technology.
"Sourcegraph does not collect or have access to User Prompts or Responses for customers with an enterprise license who bring their own LLM API key for a self-hosted deployment.Excerpt from Sourcegraph Cody's Usage and Privacy
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Customers meeting all three conditions—enterprise license, own LLM API key, and self-hosted deployment—receive a stronger data isolation guarantee because Sourcegraph Cody has no access to their interaction data.
The claim means customers with an enterprise license who bring their own LLM API key for a self-hosted deployment are assured that Sourcegraph Cody does not collect or access their User Prompts or Responses.
ConductAtlas has identified this type of provision across 296 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Sourcegraph Cody.