- Deployment
- hosted
- Hq Country
- United States
- Hq City
- San Francisco
- Ownership
- public
- Founded
- 2008
- Training Default
- never
- Residency Options
- United States, EU Data Boundary (EU + EFTA), global (github.com default)
- Gov Access Exposure
- us-cloud-act
- Eu Ai Act Role
- deployer
- Certs
- ISO 42001, ISO 27001, SOC 2 Type II, FedRAMP Moderate (data-resident models)
- DPA available
- yes
- Zero Retention Available
- Yes
- Retention Default
- Business/Enterprise via IDE (Chat, code completions, CLI): inputs and outputs not retained by default. GitHub may retain them for a limited period to investigate confirmed Acceptable Use Policy or Terms of Service violations.
- Retention Exceptions
- Bring-your-own-key (BYOK) routes prompts and responses to the customer's chosen provider, where that provider's own retention policy governs instead of GitHub's.
- Subprocessors
- Amazon Web Services Inc, Anthropic PBC, OpenAI, xAI, Cerebras Systems Inc., Fireworks AI, Google Cloud Platform, Microsoft, Cloudflare, Elasticsearch, Fastly, Oracle America, Twilio (SendGrid), Zendesk
- Subprocessor Count
- 20
- Transfer Mechanism
- sccs
- Eu Procurement Ready
- conditional
- Eu Procurement Reason
- Since 2026-04-13 GitHub Copilot supports EU data residency aligned to the Microsoft EU Data Boundary, keeping inference in-region — but the policy is disabled by default, requires GitHub Enterprise Cloud with data residency, and changes request pricing. Never-train and not-retained-by-default are both explicit. Every AI-inference subprocessor discloses United States as its processing location.
- Last Policy Change
- 2026-04-13T00:00:00.000Z
- Change Summary
- Data residency (US + EU) and FedRAMP-authorized models became available in Copilot; EU aligns to the Microsoft EU Data Boundary (EU + EFTA) as of 2026-05-01.
- Prior Value
- Copilot inference could be processed anywhere in the world with no regional guarantee.
- Training Claim Basis
- stated
- Training Confidence
- high
- Residency Claim Basis
- stated
- Residency Confidence
- high
- Retention Claim Basis
- stated
- Retention Confidence
- high
- Subprocessors Claim Basis
- stated
- Subprocessors Confidence
- high
- Residency Class
- eu-selectable
- Portability / Exit Path
- proprietary-only
- Subprocessor Jurisdiction
- non-eu
- Underlying model providers
- OpenAI, Anthropic, Google, xAI, Cerebras, Fireworks AI
