“Partner Retention: Sourcegraph's third-party large language model providers ("Partner LLMs") will not retain any Input, Output, or Candidate Context beyond the time it takes to generate an Output ("Zero Retention"), except that Partner LLMs may temporarily retain Inputs and Outputs solely for the purpose of detecting and preventing abuse or serious harm, and will not use such data for model training or any other purposes, provided that you access Sourcegraph's AI Tools through Sourcegraph's Partner LLMs.”
“* Usage Data means data we generate or derive from your use of the Services that reflects how you interact with and use the Services, such as feature interaction data and usage patterns (including user identifiers associated with feature usage), feature flags and configuration settings, AI feature usage (including types of Inputs submitted, prompt titles, prompt categories, query-derived metadata, and interaction patterns), deployment information, system configuration data, session data, operational signals, and service health metrics.”
“Anthropic AI USA Processes user queries and code snippets submitted to Sourcegraph AI Tools”
“Provider will maintain records of its processing activities and its compliance with this DPA as required by Applicable Data Protection Laws, and will retain such records for 3 years after the DPA ends.”
“Our servers and operations are located in the United States, and we have team members located around the world.”
“Customer has 15 days after notice of a change to the Approved Subprocessors to object, otherwise Customer will be deemed to accept the changes.”
Downstream
Who's behind Sourcegraph, as listed in its own subprocessor documents. 7 subprocessors.
Model providers
- AnthropicUSA
- Fireworks AIUSA
- OpenAIUSA
Hyperscalers
- Google Cloudunstated
Other subprocessors
- CloudflareUSA
- SentryUSA
- SparkPostUSA
Reviewer notes
Extracted by deterministic rules (rules/v1), no language model. Coverage is limited to recognisable clauses and a gazetteer of common subprocessors; absent values mean 'not matched', not 'not present'.
Documents read
- privacy policy https://sourcegraph.com/terms/privacyHTTP 200 · 2026-10-09
- subprocessors https://sourcegraph.com/terms/subprocessorsHTTP 200 · 2026-10-09
- dpa https://sourcegraph.com/terms/dpaHTTP 200 · 2026-10-09
- terms https://sourcegraph.com/terms/tosHTTP 200 · 2026-10-09
- ai policy https://sourcegraph.com/terms/ai-termsHTTP 200 · 2026-10-09
Document changes
No document changes yet. These appear when a later reading of a page differs from the previous one; no model involved.
Fact changes
No changes recorded yet. Changes appear here when a later reading differs from an earlier one.
Corrections
No correction requests. Anyone may dispute a fact with a source; requests and resolutions are public and ledger-entered.
Facts are as stated in Sourcegraph's public documents on the date read. This is a record, not legal advice. Work for Sourcegraph? Claim this profile · Something wrong? Request a correction.