If you or your organization has signed a separate Order Form with Sourcegraph, those customized terms take precedence over the standard terms published on this page.
This analysis describes what Sourcegraph Cody's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Enterprise customers operating under a negotiated Order Form may have materially different rights, obligations, and protections than those described in the standard public terms, and those differences are not publicly disclosed.
Business customers with a signed Order Form should review that document rather than relying on the publicly posted standard terms, as the Order Form governs in case of any conflict. Individual users without a custom Order Form are governed by the applicable standard terms linked on this page.
Cross-platform context
See how other platforms handle Order Form Customization Override and similar clauses.
Compare across platforms →Monitoring
Sourcegraph Cody has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"These terms apply to all Sourcegraph products (except for Amp) and all deployment types, unless you execute an Order Form with us with customized terms.— Excerpt from Sourcegraph Cody's Sourcegraph Terms of Service
(1) REGULATORY LANDSCAPE: The Order Form override mechanism is standard in B2B software licensing but may create compliance complexity if negotiated terms modify data processing obligations in ways that deviate from regulatory defaults under GDPR, CCPA, or HIPAA. Data processing addenda or agreements must reflect actual processing practices regardless of what the standard terms state. (2) GOVERNANCE EXPOSURE: Low for standard enterprise contracting. However, if Order Forms contain provisions that limit data subject rights, modify liability caps, or alter IP ownership of AI-generated outputs, those modifications may create jurisdiction-specific compliance exposure that is not visible from the public terms index. (3) JURISDICTION FLAGS: GDPR Article 28 requires data processing agreements with processors, and an Order Form override does not eliminate that requirement. California organizations should confirm that any Order Form includes CPRA-compliant contractual service provider terms if applicable. (4) CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should maintain a current copy of all executed Order Forms and confirm which product lines and deployment types each covers. The explicit exclusion of Amp from the standard terms scope raises a question about whether Amp deployments require a separate Order Form and what terms govern absent one. (5) COMPLIANCE CONSIDERATIONS: Legal teams should audit existing Order Forms to confirm they are current, cover all products in use, and include required data processing provisions. Organizations using Amp should contact Sourcegraph to obtain the applicable governing terms.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Enterprise customers operating under a negotiated Order Form may have materially different rights, obligations, and protections than those described in the standard public terms, and those differences are not publicly disclosed.
Business customers with a signed Order Form should review that document rather than relying on the publicly posted standard terms, as the Order Form governs in case of any conflict. Individual users without a custom Order Form are governed by the applicable standard terms linked on this page.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Sourcegraph Cody.