An AI-powered code editor developed by Codeium that integrates artificial intelligence capabilities directly into the development environment to assist programmers with coding tasks. As a development tool that processes user code and potentially sensitive project data, the platform's privacy and terms policies are important for developers concerned about code confidentiality, data handling practices, and intellectual property rights. The service's policies affect how user-generated code and development workflows are stored, analyzed, and potentially used for AI model training.
High, provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure. Medium, provisions worth knowing about but with partial protections or limited scope. Low, standard terms with minimal consumer impact.
Higher = more protective of you, the user/customer — a deliberately user-protective lens, not a universal “good vs bad” score. Computed algorithmically from Windsurf’s cited governance stances; no dimension we haven’t confidently read is ever counted against the score. Free, reproducible, and never purchasable.
This clause establishes a specific restriction on the otherwise customer-owned output of Devin, carving out competitive and reverse-engineering uses from the permitted intellectual property rights.
This clause establishes that customers hold intellectual property rights in Devin's output, enabling commercial use without a separate licensing step.
This clause establishes an absolute prohibition on model training using Enterprise customer data absent express prior written consent, providing a stronger protection than the default opt-out availab…
This clause establishes that the default model training data use is reversible for paid plan users, and that opting out triggers both a training exclusion and a Zero Data Retention arrangement with m…
This clause establishes that model training on customer data is an active default practice, meaning customers who do not take affirmative steps to opt out are subject to this use of their data.
The submitted URL returned a 404 error page rather than Windsurf's Enterprise Terms document. No contract terms, data handling provisions, pricing conditions, or legal obligations were present in the returned …
This document explains how Windsurf collects, uses, and keeps your data when you use the Devin product. By default, your data may be used to train Windsurf's models, but if …
Windsurf's Terms of Service govern how you may use its AI coding assistant, and you own all output the service produces. However, Windsurf makes no guarantees about the service or …
Windsurf's privacy policy explains what the company does with your information when you use its Services. If you signed up with a work email, your employer may be told you …
Windsurf changed its default data use policy for model training. Previously, the company stated it would not use customer data for model training unless users explicitly opted in. The updated …
View change record →Windsurf's Terms of Service were substantially rewritten on July 1, 2026. The updated terms rebrand the service from Windsurf to the Cognition Platform, clarify that the terms are now offered …
View change record →Windsurf replaced technical documentation about their Devin AI product with a comprehensive security and data handling disclosure. The previous document described Devin's vulnerability remediation capabilities; the updated document now describes …
View change record →Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
ConductAtlas tracks 4 Windsurf documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.
Windsurf has made 14 policy changes in the past 12 months across the documents ConductAtlas tracks, including 1 classified as high severity.
ConductAtlas has classified 60 provisions across Windsurf's tracked documents. 8 are rated high severity, 44 medium, and 8 low.
Yes. Monitor subscribers ($4.99/month) can add Windsurf to their watchlist and receive same-day email alerts whenever any tracked document changes.