Amazon Q Developer vs. GitHub Copilot: data protection per plan

Amazon Q Developer (2 plans) and GitHub Copilot (7 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.

Last updated: 18 Oct 2026 (latest review date of the tools shown)

Choose another tool Two tools from the same category open their dedicated comparison page.

Tool 1Tool 2Tool 3 (optional)

At a glance

Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.

Plan tier

All plans: each value is listed with the plans it applies to.

Overview: each value with the plans it applies to
Feature	Amazon Q Developer	GitHub Copilot
Provider based in	Depending on the account country: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg	According to the GitHub General Privacy Statement
Plans recorded	2	7
Hosting	mixed: Free TierEU option: Pro Tier	mixed: Free, Student, ProEU option: Business, Enterprise
Training on inputs	opt-out available: Free Tierno: Pro Tier	opt-out available: Free, Pro, Pro+not documented: Studentno: Business, Enterprise
DPA	yes: all 2 plans	not documented: Free, Student, Proyes: Business, Enterprise
As of	18 Oct 2026	18 Oct 2026

Plans compared

Plan vs. planAll plans

Amazon Q Developer planGitHub Copilot plan

Plans of the same tier are preselected: the tier chosen in the tier switch, otherwise the tier of the plan you pick yourself. Plans you pick yourself stay. The address holds your selection and can be shared.

Comparison of Amazon Q Developer Pro Tier vs. GitHub Copilot Business, one plan each, without rating
Feature	Amazon Q DeveloperPro TierTier: Team/Business · Amazon Web Services · As of 18 Oct 2026	GitHub CopilotBusinessTier: Team/Business · GitHub, Inc. · As of 18 Oct 2026

	yes	yes
Details: DPA available	yes (according to the GDPR Center, the AWS GDPR DPA, including standard contractual clauses, is part of the AWS Service Terms and applies automatically) Provider’s DPA	yes: Copilot is covered by the GitHub Data Protection Agreement, which applies to all generally available (GA) Copilot features and the previews listed in 'GitHub DPA-Covered Previews' (q8); GitHub and customers 'can enter a Data Protection Agreement that supports compliance with the GDPR' (q1). For purchases directly from GitHub, the GitHub Generative AI Services Terms apply; for purchases via Microsoft, the Microsoft Product Terms apply (q8). Provider’s DPA

	no	no
Details: Training on inputs	FAQ: Amazon Q Developer Pro and Amazon Q Business do not use content for service improvement; content from the Pro Tier is not used to train underlying foundation models. Telemetry/usage metrics may be collected (opt-out in the IDE settings). Pricing page: 'Automatically opted out'.	"No. GitHub does not use either Copilot Business or Enterprise data to train its models." (q1); q3: "GitHub does not use Copilot Business or Copilot Enterprise customer data to train AI models." Third-party models: according to q3, OpenAI, among others, "do not train models on customer business data", Google/Gemini does not use prompts for training, zero data retention agreements with OpenAI, Anthropic, xAI and Fireworks AI (details per provider in q3). q14: "Copilot Business and Copilot Enterprise customers' data is protected under GitHub's Data Protection Agreement, which prohibits such use without customer authorization."

	EU option	EU option
Details: Data residency	Documentation 'Amazon Q Developer Pro Region support': the Q Developer console and profile are available in US East (N. Virginia) and Europe (Frankfurt); Pro via a personal Builder ID only in US East (N. Virginia). Documentation 'Data storage': in the Pro Tier, content is stored in the profile Region only for the following features: Q chat in the AWS console, error diagnosis in the console, Q in Eclipse, JetBrains, VS Code and Visual Studio, and Q on the command line; for all other features 'your content may be stored and processed in a US Region' (can be blocked via a service control policy). Exceptions include: Amazon Q artifacts (visualisations) in a US Region; Console to Code stored in the console Region and processed in a US Region; CloudWatch investigations possibly in other Regions. Not available for profiles in Frankfurt: support chat, troubleshooting resources, .NET transformation in the IDE, Slack integration, Console Mobile App, GitLab Duo with Amazon Q, Amazon Q for GitHub. Cross-region inference stays within the geography (Europe: Frankfurt, Ireland, Paris, Stockholm).	Default on github.com: storage in the USA (q7). EU data residency via GitHub Enterprise Cloud with GHE.com: Copilot Business or Enterprise can be assigned there (q7). With the policy 'Restrict Copilot to data residency compliant models', according to q6, 'all inference processing and associated data' remain in the selected region (EU or USA); policy disabled by default, additional consumption +10 % AI Credits (q6). Without this policy, according to q5, Copilot data and logs are 'by default stored outside your region'. Inline suggestions: models hosted on Azure (q3).

	list available	list available
Details: List published	Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country) AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt) Amazon Bedrock (LLM inference; cross-region inference within the geography) The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement Provider’s list	Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States GitHub subsidiaries as per the list: GitHub Australia Pty Ltd, GitHub BV (NL), GitHub Canada ULC, GitHub Germany GmbH, GitHub India Pty Ltd, npm Inc, Semmle Inc Provider’s list

differs by plan	FAQ and documentation 'Data storage'…	Default settings according to q1: access…
Details: Data retention	FAQ and documentation 'Data storage': content is stored to generate responses and to provide the service; according to the documentation, 'We do not use content from Amazon Q Developer Pro or Amazon Q Business for service improvement'; encryption at rest and in transit. Specific retention period: not publicly documented.	Default settings according to q1: access via IDE (chat and code completions): prompts and suggestions "Not retained"; User Engagement Data two years; Feedback Data "as long as needed for its intended purpose". All other access routes (including github.com, Mobile, CLI): prompts and suggestions 28 days; User Engagement Data two years. DPA (October 2025 version), Section 8: after the end of the services, GitHub deletes the Customer Personal Data or returns it at the customer's choice and deletes existing copies "in accordance with our retention and deletion policy" (q13). Unlike q1, the Copilot Trust Center FAQ (q16) assigns Copilot CLI to IDE access: inputs and outputs "Not retained by default" (exception: time-limited retention in the event of confirmed violations of the Acceptable Use Policies or Terms of Service); other access: "Retained for up to 28 days by default".

	19 USD/user/mo	19 USD/user/mo
Details: Price	19 USD per user per month (pricing page, no indication whether incl. VAT; according to AWS Tax Help, AWS Europe charges VAT on service charges for accounts in the EU)	19 USD per assigned seat/month (q2)
	yes	yes
Details: AI features included	yes (extended limits for agentic requests, according to the FAQ 10,000 inference calls per month or around 1,000 user requests; Java/.NET transformation up to 4,000 lines of code per user in the pool; admin dashboard, IP indemnity)	yes (1,900 AI Credits per user/month, access to premium models; q2)

	11 sources	11 sources
Details: Sources with retrieval date	Amazon Q Developer PricingPricing page, retrieved 14 Oct 2026 Amazon Q Developer FAQsDocumentation, retrieved 14 Oct 2026 AWS Sub-processors (as of 2026-07-28)Sub-processor list, retrieved 14 Oct 2026 AWS GDPR CenterPrivacy notice, retrieved 14 Oct 2026 Cross-region processing in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026 Supported Regions for Amazon Q DeveloperDocumentation, retrieved 14 Oct 2026 Amazon Q Developer Pro Region supportDocumentation, retrieved 18 Oct 2026 Data storage in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026 Amazon Q Developer service improvementDocumentation, retrieved 18 Oct 2026 AWS Service Terms (as of 2026-10-13)Terms and conditions, retrieved 18 Oct 2026 AWS Tax Help – European UnionHelp centre, retrieved 18 Oct 2026 All details on the tool page	GitHub Copilot: Plans & pricing incl. FAQ (Privacy, Retention, Training)Pricing page / provider FAQ, retrieved 18 Oct 2026 Plans for GitHub Copilot (GitHub Docs)Official documentation, retrieved 14 Oct 2026 Hosting of models for GitHub Copilot (GitHub Docs)Official documentation, retrieved 18 Oct 2026 GitHub SubprocessorsSub-processor list, retrieved 14 Oct 2026 About storage of your data with data residency (GHE.com)Official documentation, retrieved 14 Oct 2026 GitHub Copilot with data residencyOfficial documentation, retrieved 14 Oct 2026 About GitHub Enterprise Cloud with data residencyOfficial documentation, retrieved 14 Oct 2026 Resources for getting approval of GitHub CopilotOfficial documentation, retrieved 14 Oct 2026 GitHub Data Protection Agreement (DPA), version October 2025DPA, retrieved 14 Oct 2026 Managing GitHub Copilot policies as an individual subscriber (GitHub Docs)Documentation, retrieved 18 Oct 2026 GitHub Copilot Trust Center: FAQ (Privacy, Security, Commercial)Trust Center / provider FAQ, retrieved 18 Oct 2026 All details on the tool page

Contract / DPA

: Amazon Q Developer Pro Tieryes; GitHub Copilot Businessyes; Amazon Q Developer Pro Tier
yes (according to the GDPR Center, the AWS GDPR DPA, including standard contractual clauses, is part of the AWS Service Terms and applies automatically)
Provider’s DPA
GitHub Copilot Business
yes: Copilot is covered by the GitHub Data Protection Agreement, which applies to all generally available (GA) Copilot features and the previews listed in 'GitHub DPA-Covered Previews' (q8); GitHub and customers 'can enter a Data Protection Agreement that supports compliance with the GDPR' (q1). For purchases directly from GitHub, the GitHub Generative AI Services Terms apply; for purchases via Microsoft, the Microsoft Product Terms apply (q8).
Provider’s DPA

Training

: Amazon Q Developer Pro Tierno; GitHub Copilot Businessno; Amazon Q Developer Pro Tier
FAQ: Amazon Q Developer Pro and Amazon Q Business do not use content for service improvement; content from the Pro Tier is not used to train underlying foundation models. Telemetry/usage metrics may be collected (opt-out in the IDE settings). Pricing page: 'Automatically opted out'.
GitHub Copilot Business
"No. GitHub does not use either Copilot Business or Enterprise data to train its models." (q1); q3: "GitHub does not use Copilot Business or Copilot Enterprise customer data to train AI models." Third-party models: according to q3, OpenAI, among others, "do not train models on customer business data", Google/Gemini does not use prompts for training, zero data retention agreements with OpenAI, Anthropic, xAI and Fireworks AI (details per provider in q3). q14: "Copilot Business and Copilot Enterprise customers' data is protected under GitHub's Data Protection Agreement, which prohibits such use without customer authorization."

Hosting

: Amazon Q Developer Pro TierEU option; GitHub Copilot BusinessEU option; Amazon Q Developer Pro Tier
Documentation 'Amazon Q Developer Pro Region support': the Q Developer console and profile are available in US East (N. Virginia) and Europe (Frankfurt); Pro via a personal Builder ID only in US East (N. Virginia). Documentation 'Data storage': in the Pro Tier, content is stored in the profile Region only for the following features: Q chat in the AWS console, error diagnosis in the console, Q in Eclipse, JetBrains, VS Code and Visual Studio, and Q on the command line; for all other features 'your content may be stored and processed in a US Region' (can be blocked via a service control policy). Exceptions include: Amazon Q artifacts (visualisations) in a US Region; Console to Code stored in the console Region and processed in a US Region; CloudWatch investigations possibly in other Regions. Not available for profiles in Frankfurt: support chat, troubleshooting resources, .NET transformation in the IDE, Slack integration, Console Mobile App, GitLab Duo with Amazon Q, Amazon Q for GitHub. Cross-region inference stays within the geography (Europe: Frankfurt, Ireland, Paris, Stockholm).
GitHub Copilot Business
Default on github.com: storage in the USA (q7). EU data residency via GitHub Enterprise Cloud with GHE.com: Copilot Business or Enterprise can be assigned there (q7). With the policy 'Restrict Copilot to data residency compliant models', according to q6, 'all inference processing and associated data' remain in the selected region (EU or USA); policy disabled by default, additional consumption +10 % AI Credits (q6). Without this policy, according to q5, Copilot data and logs are 'by default stored outside your region'. Inline suggestions: models hosted on Azure (q3).

Sub-processors

: Amazon Q Developer Pro Tierlist available; GitHub Copilot Businesslist available; Amazon Q Developer Pro Tier
Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country)
AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt)
Amazon Bedrock (LLM inference; cross-region inference within the geography)
The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement
Provider’s list
GitHub Copilot Business
Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
GitHub subsidiaries as per the list: GitHub Australia Pty Ltd, GitHub BV (NL), GitHub Canada ULC, GitHub Germany GmbH, GitHub India Pty Ltd, npm Inc, Semmle Inc
Provider’s list

Retention

differs by plan: Amazon Q Developer Pro TierFAQ and documentation 'Data storage'…; GitHub Copilot BusinessDefault settings according to q1: access…; Amazon Q Developer Pro TierFAQ and documentation 'Data storage': content is stored to generate responses and to provide the service; according to the documentation, 'We do not use content from Amazon Q Developer Pro or Amazon Q Business for service improvement'; encryption at rest and in transit. Specific retention period: not publicly documented.
GitHub Copilot BusinessDefault settings according to q1: access via IDE (chat and code completions): prompts and suggestions "Not retained"; User Engagement Data two years; Feedback Data "as long as needed for its intended purpose". All other access routes (including github.com, Mobile, CLI): prompts and suggestions 28 days; User Engagement Data two years. DPA (October 2025 version), Section 8: after the end of the services, GitHub deletes the Customer Personal Data or returns it at the customer's choice and deletes existing copies "in accordance with our retention and deletion policy" (q13). Unlike q1, the Copilot Trust Center FAQ (q16) assigns Copilot CLI to IDE access: inputs and outputs "Not retained by default" (exception: time-limited retention in the event of confirmed violations of the Acceptable Use Policies or Terms of Service); other access: "Retained for up to 28 days by default".

Price

: Amazon Q Developer Pro Tier19 USD/user/mo; GitHub Copilot Business19 USD/user/mo; Amazon Q Developer Pro Tier
19 USD per user per month (pricing page, no indication whether incl. VAT; according to AWS Tax Help, AWS Europe charges VAT on service charges for accounts in the EU)
GitHub Copilot Business
19 USD per assigned seat/month (q2)
: Amazon Q Developer Pro Tieryes; GitHub Copilot Businessyes; Amazon Q Developer Pro Tier
yes (extended limits for agentic requests, according to the FAQ 10,000 inference calls per month or around 1,000 user requests; Java/.NET transformation up to 4,000 lines of code per user in the pool; admin dashboard, IP indemnity)
GitHub Copilot Business
yes (1,900 AI Credits per user/month, access to premium models; q2)

Evidence

: Amazon Q Developer Pro Tier11 sources; GitHub Copilot Business11 sources; Amazon Q Developer Pro Tier
Amazon Q Developer PricingPricing page, retrieved 14 Oct 2026
Amazon Q Developer FAQsDocumentation, retrieved 14 Oct 2026
AWS Sub-processors (as of 2026-07-28)Sub-processor list, retrieved 14 Oct 2026
AWS GDPR CenterPrivacy notice, retrieved 14 Oct 2026
Cross-region processing in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026
Supported Regions for Amazon Q DeveloperDocumentation, retrieved 14 Oct 2026
Amazon Q Developer Pro Region supportDocumentation, retrieved 18 Oct 2026
Data storage in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026
Amazon Q Developer service improvementDocumentation, retrieved 18 Oct 2026
AWS Service Terms (as of 2026-10-13)Terms and conditions, retrieved 18 Oct 2026
AWS Tax Help – European UnionHelp centre, retrieved 18 Oct 2026
All details on the tool page
GitHub Copilot Business
GitHub Copilot: Plans & pricing incl. FAQ (Privacy, Retention, Training)Pricing page / provider FAQ, retrieved 18 Oct 2026
Plans for GitHub Copilot (GitHub Docs)Official documentation, retrieved 14 Oct 2026
Hosting of models for GitHub Copilot (GitHub Docs)Official documentation, retrieved 18 Oct 2026
GitHub SubprocessorsSub-processor list, retrieved 14 Oct 2026
About storage of your data with data residency (GHE.com)Official documentation, retrieved 14 Oct 2026
GitHub Copilot with data residencyOfficial documentation, retrieved 14 Oct 2026
About GitHub Enterprise Cloud with data residencyOfficial documentation, retrieved 14 Oct 2026
Resources for getting approval of GitHub CopilotOfficial documentation, retrieved 14 Oct 2026
GitHub Data Protection Agreement (DPA), version October 2025DPA, retrieved 14 Oct 2026
Managing GitHub Copilot policies as an individual subscriber (GitHub Docs)Documentation, retrieved 18 Oct 2026
GitHub Copilot Trust Center: FAQ (Privacy, Security, Commercial)Trust Center / provider FAQ, retrieved 18 Oct 2026
All details on the tool page

Comparison of Amazon Q Developer vs. GitHub Copilot by feature, without rating
Feature	Amazon Q DeveloperAmazon Web Services · 2 plans · As of 18 Oct 2026	GitHub CopilotGitHub, Inc. · 7 plans · As of 18 Oct 2026

differs by tool	yesall 2 plans	not publicly documentedFree, Student, Pro, Pro+, Max yesBusiness, Enterprise
Details: DPA available	Free Tier yes (AWS Service Terms, section 1.14.1: 'These Service Terms incorporate the AWS Data Processing Addendum ("DPA"), when you use AWS Services to process Customer Data'; no exception for the Free Tier is stated there; section 50.13 additionally governs the use of Free Tier content for service improvement) Provider’s DPA Pro Tier yes (according to the GDPR Center, the AWS GDPR DPA, including standard contractual clauses, is part of the AWS Service Terms and applies automatically) Provider’s DPA	Free not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise Student not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise Pro not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise Pro+ not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise Max not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise Business yes: Copilot is covered by the GitHub Data Protection Agreement, which applies to all generally available (GA) Copilot features and the previews listed in 'GitHub DPA-Covered Previews' (q8); GitHub and customers 'can enter a Data Protection Agreement that supports compliance with the GDPR' (q1). For purchases directly from GitHub, the GitHub Generative AI Services Terms apply; for purchases via Microsoft, the Microsoft Product Terms apply (q8). Provider’s DPA Enterprise yes: as Business (GitHub Data Protection Agreement for GA features and listed DPA previews; q8, q1). Provider’s DPA

differs by tool	opt-out availableFree Tier noPro Tier	opt-out availableFree, Pro, Pro+, Max not publicly documentedStudent noBusiness, Enterprise
Details: Training on inputs	Free Tier FAQ and documentation 'Amazon Q Developer service improvement': in the Free Tier, content (questions, responses, generated code) may be used for service improvement, according to the documentation including 'for model training'. Service Terms 50.13: Amazon Q Content may be used to improve Amazon Q and, for that purpose, stored outside the AWS Region in use; content that does not contain personal data may also be used to train other AWS ML models. Opt-out depending on the environment: IDE/command line via the setting 'Share Amazon Q content with AWS' or 'Amazon Q: Share Content'; console/mobile app/AWS websites/chat applications via an AI services opt-out policy in AWS Organizations. Telemetry (without code) can be switched off separately. Pricing page: 'Opt-out available'. Pro Tier FAQ: Amazon Q Developer Pro and Amazon Q Business do not use content for service improvement; content from the Pro Tier is not used to train underlying foundation models. Telemetry/usage metrics may be collected (opt-out in the IDE settings). Pricing page: 'Automatically opted out'.	Free GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings". Student q1, q3 and q14 expressly state the training rule for Copilot Free, Pro, Pro+ and Max (q14: "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan ..."). Copilot Student is not mentioned in these sentences; the retrieved primary sources contain no separate statement on Student. The Copilot Trust Center FAQ (q16) likewise states the training rule only for "Individual (Free/Pro/Pro+/Max) Subscribers"; the documentation page on Copilot Student (q17) contains no statement on training. Pro GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings". Pro+ GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings". Max GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings". Business "No. GitHub does not use either Copilot Business or Enterprise data to train its models." (q1); q3: "GitHub does not use Copilot Business or Copilot Enterprise customer data to train AI models." Third-party models: according to q3, OpenAI, among others, "do not train models on customer business data", Google/Gemini does not use prompts for training, zero data retention agreements with OpenAI, Anthropic, xAI and Fireworks AI (details per provider in q3). q14: "Copilot Business and Copilot Enterprise customers' data is protected under GitHub's Data Protection Agreement, which prohibits such use without customer authorization." Enterprise "GitHub does not use either Copilot Business or Enterprise data to train its models." (q1, q3). q14: "Copilot Business and Copilot Enterprise customers' data is protected under GitHub's Data Protection Agreement, which prohibits such use without customer authorization."

	mixedFree Tier EU optionPro Tier	mixedFree, Student, Pro, Pro+, Max EU optionBusiness, Enterprise
Details: Data residency	Free Tier Documentation 'Data storage in Amazon Q Developer': in the Free Tier, content is stored in a US Region (console error diagnosis: US West/Oregon, everything else: US East/N. Virginia). Cross-region inference may route requests to other Regions within the geography. Service Terms 50.13.1: content used for service improvement may be stored outside the Region in use. The sub-processor list names Canada, Germany, the Netherlands and the USA as locations of the AWS entities that process Free Tier content for service improvement (only without opt-out). Pro Tier Documentation 'Amazon Q Developer Pro Region support': the Q Developer console and profile are available in US East (N. Virginia) and Europe (Frankfurt); Pro via a personal Builder ID only in US East (N. Virginia). Documentation 'Data storage': in the Pro Tier, content is stored in the profile Region only for the following features: Q chat in the AWS console, error diagnosis in the console, Q in Eclipse, JetBrains, VS Code and Visual Studio, and Q on the command line; for all other features 'your content may be stored and processed in a US Region' (can be blocked via a service control policy). Exceptions include: Amazon Q artifacts (visualisations) in a US Region; Console to Code stored in the console Region and processed in a US Region; CloudWatch investigations possibly in other Regions. Not available for profiles in Frankfurt: support chat, troubleshooting resources, .NET transformation in the IDE, Slack integration, Console Mobile App, GitLab Duo with Amazon Q, Amazon Q for GitHub. Cross-region inference stays within the geography (Europe: Frankfurt, Ireland, Paris, Stockholm).	Free GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI. Student GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI. Pro GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI. Pro+ GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI. Max GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI. Business Default on github.com: storage in the USA (q7). EU data residency via GitHub Enterprise Cloud with GHE.com: Copilot Business or Enterprise can be assigned there (q7). With the policy 'Restrict Copilot to data residency compliant models', according to q6, 'all inference processing and associated data' remain in the selected region (EU or USA); policy disabled by default, additional consumption +10 % AI Credits (q6). Without this policy, according to q5, Copilot data and logs are 'by default stored outside your region'. Inline suggestions: models hosted on Azure (q3). Enterprise As Business: default USA (q7); EU data residency via GHE.com with the policy 'Restrict Copilot to data residency compliant models' (q6, q5). q6 lists models of the GPT and Claude series for the EU; according to q6, model availability per region changes continuously. Not all Copilot features are available on GHE.com (q7).

	list availableall 2 plans	list availableall 7 plans
Details: List published	Free Tier Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country) AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt) Amazon Bedrock (LLM inference; cross-region inference within the geography) The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement Provider’s list Pro Tier Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country) AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt) Amazon Bedrock (LLM inference; cross-region inference within the geography) The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement Provider’s list	Free According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11). Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States Provider’s list Student According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11). Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States Provider’s list Pro According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11). Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States Provider’s list Pro+ According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11). Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States Provider’s list Max According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11). Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States Provider’s list Business Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States GitHub subsidiaries as per the list: GitHub Australia Pty Ltd, GitHub BV (NL), GitHub Canada ULC, GitHub Germany GmbH, GitHub India Pty Ltd, npm Inc, Semmle Inc Provider’s list Enterprise Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States GitHub subsidiaries as per the list: GitHub Australia Pty Ltd, GitHub BV (NL), GitHub Canada ULC, GitHub Germany GmbH, GitHub India Pty Ltd, npm Inc, Semmle Inc Provider’s list

differs by tool	FAQ and documentation 'Data storage': AWS…Free Tier FAQ and documentation 'Data storage'…Pro Tier	not publicly documentedFree, Student, Pro, Pro+, Max Default settings according to q1: access…Business, Enterprise
Details: Data retention	Free TierFAQ and documentation 'Data storage': AWS stores questions, responses and additional context (console metadata, code) to generate responses and may retain content for service improvement unless an opt-out has been made; encryption at rest and in transit. Specific retention period: not publicly documented (the Service Terms state a period of up to 60 days only for Kiro Free Tier, not for Amazon Q Developer). Pro TierFAQ and documentation 'Data storage': content is stored to generate responses and to provide the service; according to the documentation, 'We do not use content from Amazon Q Developer Pro or Amazon Q Business for service improvement'; encryption at rest and in transit. Specific retention period: not publicly documented.	Freenot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary". Studentnot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary". Pronot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary". Pro+not publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary". Maxnot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary". BusinessDefault settings according to q1: access via IDE (chat and code completions): prompts and suggestions "Not retained"; User Engagement Data two years; Feedback Data "as long as needed for its intended purpose". All other access routes (including github.com, Mobile, CLI): prompts and suggestions 28 days; User Engagement Data two years. DPA (October 2025 version), Section 8: after the end of the services, GitHub deletes the Customer Personal Data or returns it at the customer's choice and deletes existing copies "in accordance with our retention and deletion policy" (q13). Unlike q1, the Copilot Trust Center FAQ (q16) assigns Copilot CLI to IDE access: inputs and outputs "Not retained by default" (exception: time-limited retention in the event of confirmed violations of the Acceptable Use Policies or Terms of Service); other access: "Retained for up to 28 days by default". EnterpriseDefault settings according to q1: access via IDE (chat and code completions): prompts and suggestions "Not retained"; User Engagement Data two years; Feedback Data "as long as needed for its intended purpose". All other access routes (including github.com, Mobile, CLI): prompts and suggestions 28 days; User Engagement Data two years. DPA (October 2025 version), Section 8: after the end of the services, GitHub deletes the Customer Personal Data or returns it at the customer's choice and deletes existing copies "in accordance with our retention and deletion policy" (q13). Unlike q1, the Copilot Trust Center FAQ (q16) assigns Copilot CLI to IDE access: inputs and outputs "Not retained by default" (exception: time-limited retention in the event of confirmed violations of the Acceptable Use Policies or Terms of Service); other access: "Retained for up to 28 days by default".

differs by tool	0 USDFree Tier 19 USD/user/moPro Tier	0 USDFree, Student 10 USD/moPro 39 USD/moPro+ 100 USD/moMax 19 USD/user/moBusiness 39 USD/user/moEnterprise
Details: Price	Free Tier 0 USD (pricing page) Pro Tier 19 USD per user per month (pricing page, no indication whether incl. VAT; according to AWS Tax Help, AWS Europe charges VAT on service charges for accounts in the EU)	Free 0 USD (q2) Student 0 USD for verified students (q2) Pro 10 USD/month (q2; free of charge for some user groups) Pro+ 39 USD/month (q2) Max 100 USD/month (q2) Business 19 USD per assigned seat/month (q2) Enterprise 39 USD per assigned seat/month (q2)
	yesall 2 plans	yesall 7 plans
Details: AI features included	Free Tier yes (50 agentic requests per month in IDE/CLI; Java upgrade transformation up to 1,000 lines of code per month; console Q&A) Pro Tier yes (extended limits for agentic requests, according to the FAQ 10,000 inference calls per month or around 1,000 user requests; Java/.NET transformation up to 4,000 lines of code per user in the pool; admin dashboard, IP indemnity)	Free yes (limited: according to q2, an allowance of GitHub AI Credits, automatic model selection; according to q1, 2000 completions and 50 chat requests) Student yes (allowance of GitHub AI Credits, automatic model selection, without third-party agents; q2) Pro yes (base 1,000 AI Credits; q2) Pro+ yes (base 3,900 AI Credits, access to premium models; q2) Max yes (base 10,000 AI Credits, priority access to premium models; q2) Business yes (1,900 AI Credits per user/month, access to premium models; q2) Enterprise yes (3,900 AI Credits per user/month, priority access to premium models; q2; requires GitHub Enterprise Cloud)

	12 sources	13 sources
Details: Sources with retrieval date	Amazon Q Developer PricingPricing page, retrieved 14 Oct 2026 Amazon Q Developer FAQsDocumentation, retrieved 14 Oct 2026 AWS Sub-processors (as of 2026-07-28)Sub-processor list, retrieved 14 Oct 2026 AWS GDPR CenterPrivacy notice, retrieved 14 Oct 2026 Cross-region processing in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026 Supported Regions for Amazon Q DeveloperDocumentation, retrieved 14 Oct 2026 Amazon Q Developer Pro Region supportDocumentation, retrieved 18 Oct 2026 Data storage in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026 Amazon Q Developer service improvementDocumentation, retrieved 18 Oct 2026 Opt out of data sharing in the IDE and command lineDocumentation, retrieved 18 Oct 2026 AWS Service Terms (as of 2026-10-13)Terms and conditions, retrieved 18 Oct 2026 AWS Tax Help – European UnionHelp centre, retrieved 18 Oct 2026 All details on the tool page	GitHub Copilot: Plans & pricing incl. FAQ (Privacy, Retention, Training)Pricing page / provider FAQ, retrieved 18 Oct 2026 Plans for GitHub Copilot (GitHub Docs)Official documentation, retrieved 14 Oct 2026 Hosting of models for GitHub Copilot (GitHub Docs)Official documentation, retrieved 18 Oct 2026 GitHub SubprocessorsSub-processor list, retrieved 14 Oct 2026 About storage of your data with data residency (GHE.com)Official documentation, retrieved 14 Oct 2026 GitHub Copilot with data residencyOfficial documentation, retrieved 14 Oct 2026 About GitHub Enterprise Cloud with data residencyOfficial documentation, retrieved 14 Oct 2026 Resources for getting approval of GitHub CopilotOfficial documentation, retrieved 14 Oct 2026 GitHub General Privacy Statement (effective 2026-04-27)Privacy notices, retrieved 14 Oct 2026 GitHub Data Protection Agreement (DPA), version October 2025DPA, retrieved 14 Oct 2026 Managing GitHub Copilot policies as an individual subscriber (GitHub Docs)Documentation, retrieved 18 Oct 2026 GitHub Copilot Trust Center: FAQ (Privacy, Security, Commercial)Trust Center / provider FAQ, retrieved 18 Oct 2026 Access GitHub Copilot for free as a student (GitHub Docs)Official documentation, retrieved 18 Oct 2026 All details on the tool page

Contract / DPA

differs by tool: Amazon Q Developeryesall 2 plans; GitHub Copilot
not publicly documentedFree, Student, Pro, Pro+, Max
yesBusiness, Enterprise; Amazon Q Developer
Free Tier
yes (AWS Service Terms, section 1.14.1: 'These Service Terms incorporate the AWS Data Processing Addendum ("DPA"), when you use AWS Services to process Customer Data'; no exception for the Free Tier is stated there; section 50.13 additionally governs the use of Free Tier content for service improvement)
Provider’s DPA
Pro Tier
yes (according to the GDPR Center, the AWS GDPR DPA, including standard contractual clauses, is part of the AWS Service Terms and applies automatically)
Provider’s DPA
GitHub Copilot
Free
not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise
Student
not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise
Pro
not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise
Pro+
not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise
Max
not publicly documented: according to q1, Copilot Free/Pro/Pro+/Max involve data processing by GitHub as controller (reference to Terms of Service and Privacy Statement); the DPA is mentioned in q1/q8 only in connection with Business/Enterprise
Business
yes: Copilot is covered by the GitHub Data Protection Agreement, which applies to all generally available (GA) Copilot features and the previews listed in 'GitHub DPA-Covered Previews' (q8); GitHub and customers 'can enter a Data Protection Agreement that supports compliance with the GDPR' (q1). For purchases directly from GitHub, the GitHub Generative AI Services Terms apply; for purchases via Microsoft, the Microsoft Product Terms apply (q8).
Provider’s DPA
Enterprise
yes: as Business (GitHub Data Protection Agreement for GA features and listed DPA previews; q8, q1).
Provider’s DPA

Training

differs by tool: Amazon Q Developer
opt-out availableFree Tier
noPro Tier; GitHub Copilot
opt-out availableFree, Pro, Pro+, Max
not publicly documentedStudent
noBusiness, Enterprise; Amazon Q Developer
Free Tier
FAQ and documentation 'Amazon Q Developer service improvement': in the Free Tier, content (questions, responses, generated code) may be used for service improvement, according to the documentation including 'for model training'. Service Terms 50.13: Amazon Q Content may be used to improve Amazon Q and, for that purpose, stored outside the AWS Region in use; content that does not contain personal data may also be used to train other AWS ML models. Opt-out depending on the environment: IDE/command line via the setting 'Share Amazon Q content with AWS' or 'Amazon Q: Share Content'; console/mobile app/AWS websites/chat applications via an AI services opt-out policy in AWS Organizations. Telemetry (without code) can be switched off separately. Pricing page: 'Opt-out available'.
Pro Tier
FAQ: Amazon Q Developer Pro and Amazon Q Business do not use content for service improvement; content from the Pro Tier is not used to train underlying foundation models. Telemetry/usage metrics may be collected (opt-out in the IDE settings). Pricing page: 'Automatically opted out'.
GitHub Copilot
Free
GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings".
Student
q1, q3 and q14 expressly state the training rule for Copilot Free, Pro, Pro+ and Max (q14: "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan ..."). Copilot Student is not mentioned in these sentences; the retrieved primary sources contain no separate statement on Student. The Copilot Trust Center FAQ (q16) likewise states the training rule only for "Individual (Free/Pro/Pro+/Max) Subscribers"; the documentation page on Copilot Student (q17) contains no statement on training.
Pro
GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings".
Pro+
GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings".
Max
GitHub Docs "Managing Copilot policies as an individual subscriber" (q14): "Starting on April 24, 2026, if you have a Copilot Free, Copilot Pro, Copilot Pro+, or Copilot Max plan, GitHub may use your interactions with GitHub features and services—including inputs, outputs, code snippets, and associated context—to train and improve AI models." Opt-out via the setting "Allow GitHub to use my data for AI model training" = Disabled (q14) or https://github.com/settings/copilot/features: "Individual subscribers can opt out of having their data used for AI model training at any time." (q1). q3: the same applies to Copilot Free, Pro, Pro+ and Max "in accordance with our GitHub General Privacy Statement and applicable user settings".
Business
"No. GitHub does not use either Copilot Business or Enterprise data to train its models." (q1); q3: "GitHub does not use Copilot Business or Copilot Enterprise customer data to train AI models." Third-party models: according to q3, OpenAI, among others, "do not train models on customer business data", Google/Gemini does not use prompts for training, zero data retention agreements with OpenAI, Anthropic, xAI and Fireworks AI (details per provider in q3). q14: "Copilot Business and Copilot Enterprise customers' data is protected under GitHub's Data Protection Agreement, which prohibits such use without customer authorization."
Enterprise
"GitHub does not use either Copilot Business or Enterprise data to train its models." (q1, q3). q14: "Copilot Business and Copilot Enterprise customers' data is protected under GitHub's Data Protection Agreement, which prohibits such use without customer authorization."

Hosting

: Amazon Q Developer
mixedFree Tier
EU optionPro Tier; GitHub Copilot
mixedFree, Student, Pro, Pro+, Max
EU optionBusiness, Enterprise; Amazon Q Developer
Free Tier
Documentation 'Data storage in Amazon Q Developer': in the Free Tier, content is stored in a US Region (console error diagnosis: US West/Oregon, everything else: US East/N. Virginia). Cross-region inference may route requests to other Regions within the geography. Service Terms 50.13.1: content used for service improvement may be stored outside the Region in use. The sub-processor list names Canada, Germany, the Netherlands and the USA as locations of the AWS entities that process Free Tier content for service improvement (only without opt-out).
Pro Tier
Documentation 'Amazon Q Developer Pro Region support': the Q Developer console and profile are available in US East (N. Virginia) and Europe (Frankfurt); Pro via a personal Builder ID only in US East (N. Virginia). Documentation 'Data storage': in the Pro Tier, content is stored in the profile Region only for the following features: Q chat in the AWS console, error diagnosis in the console, Q in Eclipse, JetBrains, VS Code and Visual Studio, and Q on the command line; for all other features 'your content may be stored and processed in a US Region' (can be blocked via a service control policy). Exceptions include: Amazon Q artifacts (visualisations) in a US Region; Console to Code stored in the console Region and processed in a US Region; CloudWatch investigations possibly in other Regions. Not available for profiles in Frankfurt: support chat, troubleshooting resources, .NET transformation in the IDE, Slack integration, Console Mobile App, GitLab Duo with Amazon Q, Amazon Q for GitHub. Cross-region inference stays within the geography (Europe: Frankfurt, Ireland, Paris, Stockholm).
GitHub Copilot
Free
GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI.
Student
GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI.
Pro
GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI.
Pro+
GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI.
Max
GitHub General Privacy Statement (q11): "GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations." q7: "By default, GitHub stores data for GitHub.com in the USA." Regional data residency (EU) is available only via GitHub Enterprise Cloud with GHE.com; there, "Copilot Individual" is not available to managed users (q7). q3: models are hosted by OpenAI, Azure, Anthropic, Google and others; inline suggestions on the Free and Student plans run on Fireworks AI.
Business
Default on github.com: storage in the USA (q7). EU data residency via GitHub Enterprise Cloud with GHE.com: Copilot Business or Enterprise can be assigned there (q7). With the policy 'Restrict Copilot to data residency compliant models', according to q6, 'all inference processing and associated data' remain in the selected region (EU or USA); policy disabled by default, additional consumption +10 % AI Credits (q6). Without this policy, according to q5, Copilot data and logs are 'by default stored outside your region'. Inline suggestions: models hosted on Azure (q3).
Enterprise
As Business: default USA (q7); EU data residency via GHE.com with the policy 'Restrict Copilot to data residency compliant models' (q6, q5). q6 lists models of the GPT and Claude series for the EU; according to q6, model availability per region changes continuously. Not all Copilot features are available on GHE.com (q7).

Sub-processors

: Amazon Q Developerlist availableall 2 plans; GitHub Copilotlist availableall 7 plans; Amazon Q Developer
Free Tier
Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country)
AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt)
Amazon Bedrock (LLM inference; cross-region inference within the geography)
The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement
Provider’s list
Pro Tier
Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country)
AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt)
Amazon Bedrock (LLM inference; cross-region inference within the geography)
The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement
Provider’s list
GitHub Copilot
Free
According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11).
Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
Provider’s list
Student
According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11).
Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
Provider’s list
Pro
According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11).
Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
Provider’s list
Pro+
According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11).
Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
Provider’s list
Max
According to q4, the list applies to 'GitHub services governed by the GitHub Data Protection Agreement' (Enterprise customers); not expressly assigned to individual plans without a DPA. No separate list reference found for individual plans (reference to Privacy Statement q11).
Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
Provider’s list
Business
Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
GitHub subsidiaries as per the list: GitHub Australia Pty Ltd, GitHub BV (NL), GitHub Canada ULC, GitHub Germany GmbH, GitHub India Pty Ltd, npm Inc, Semmle Inc
Provider’s list
Enterprise
Third-party providers as per the list (as retrieved 2026-10-07): Amazon Web Services Inc (AWS) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States United States; Anthropic PBC AI Inference and AI Services United States United States; Cerebras Systems Inc. AI Inference and AI Services United States United States; Cloudflare Content delivery service United States United States; DataDome Solutions, Inc. Security management United States, France United States; Elasticsearch, Inc. Cloud Hosted Infrastructure United States United States; Fastly Content delivery service United States United States; Fireworks AI AI Inference and AI Services United States, Germany, Iceland United States; FullStory, Inc. Customer support ticketing analysis United States United States; Google Cloud Platform (GCP) Cloud Hosted Infrastructure, AI Inference and AI Services United States, Belgium, Singapore United States; Hewlett-Packard Limited Cloud Hosted Infrastructure United States United States; LambdaTest Cloud Hosted Infrastructure United States United States; Microsoft (Azure) Cloud Hosted Infrastructure, Data Hosting, AI Inference and AI Services United States, Canada, Chile, Mexico United States; Microsoft (Azure) Cognitive Services and customer support ticketing analysis United States United States; Microsoft Technical Services United States, Australia, Brazil, Canada, France, Japan, Norway, Spain, Sweden, Switzerland, United Kingdom United States; Moveworks Customer support ticketing analysis United States United States; NexMo Inc (aka Vonage) SMS notification provider for 2 Factor Authentication United States United States; Obsidian Security Security management United States United States; OpenAI AI Inference and AI Services United States United States; Oracle America, Inc. Cloud Hosted Infrastructure United States United States; Pusher Building and managing real-time infrastructure for web and mobile applications United States United States; Tines Automation Inc. Security management United States United States; Twilio (SendGrid) SMS notification provider for 2 Factor Authentication United States United States; xAI AI Inference and AI Services United States United States; Zendesk Customer support ticketing system United States United States
GitHub subsidiaries as per the list: GitHub Australia Pty Ltd, GitHub BV (NL), GitHub Canada ULC, GitHub Germany GmbH, GitHub India Pty Ltd, npm Inc, Semmle Inc
Provider’s list

Retention

differs by tool: Amazon Q Developer
FAQ and documentation 'Data storage': AWS…Free Tier
FAQ and documentation 'Data storage'…Pro Tier; GitHub Copilot
not publicly documentedFree, Student, Pro, Pro+, Max
Default settings according to q1: access…Business, Enterprise; Amazon Q Developer
Free TierFAQ and documentation 'Data storage': AWS stores questions, responses and additional context (console metadata, code) to generate responses and may retain content for service improvement unless an opt-out has been made; encryption at rest and in transit. Specific retention period: not publicly documented (the Service Terms state a period of up to 60 days only for Kiro Free Tier, not for Amazon Q Developer).
Pro TierFAQ and documentation 'Data storage': content is stored to generate responses and to provide the service; according to the documentation, 'We do not use content from Amazon Q Developer Pro or Amazon Q Business for service improvement'; encryption at rest and in transit. Specific retention period: not publicly documented.
GitHub Copilot
Freenot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary".
Studentnot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary".
Pronot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary".
Pro+not publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary".
Maxnot publicly documented: q1 states default retention only for Business/Enterprise ('The default settings for Copilot Business and Enterprise Customers are as follows'); no period for individual plans on the retrieved pages. Copilot Trust Center FAQ (q16): GitHub uses Copilot data from individual subscribers "for all the operational purposes described above for Business/Enterprise subscribers"; the FAQ gives no period for individual plans; Feedback Data "is retained as long as necessary".
BusinessDefault settings according to q1: access via IDE (chat and code completions): prompts and suggestions "Not retained"; User Engagement Data two years; Feedback Data "as long as needed for its intended purpose". All other access routes (including github.com, Mobile, CLI): prompts and suggestions 28 days; User Engagement Data two years. DPA (October 2025 version), Section 8: after the end of the services, GitHub deletes the Customer Personal Data or returns it at the customer's choice and deletes existing copies "in accordance with our retention and deletion policy" (q13). Unlike q1, the Copilot Trust Center FAQ (q16) assigns Copilot CLI to IDE access: inputs and outputs "Not retained by default" (exception: time-limited retention in the event of confirmed violations of the Acceptable Use Policies or Terms of Service); other access: "Retained for up to 28 days by default".
EnterpriseDefault settings according to q1: access via IDE (chat and code completions): prompts and suggestions "Not retained"; User Engagement Data two years; Feedback Data "as long as needed for its intended purpose". All other access routes (including github.com, Mobile, CLI): prompts and suggestions 28 days; User Engagement Data two years. DPA (October 2025 version), Section 8: after the end of the services, GitHub deletes the Customer Personal Data or returns it at the customer's choice and deletes existing copies "in accordance with our retention and deletion policy" (q13). Unlike q1, the Copilot Trust Center FAQ (q16) assigns Copilot CLI to IDE access: inputs and outputs "Not retained by default" (exception: time-limited retention in the event of confirmed violations of the Acceptable Use Policies or Terms of Service); other access: "Retained for up to 28 days by default".

Price

differs by tool: Amazon Q Developer
0 USDFree Tier
19 USD/user/moPro Tier; GitHub Copilot
0 USDFree, Student
10 USD/moPro
39 USD/moPro+
100 USD/moMax
19 USD/user/moBusiness
39 USD/user/moEnterprise; Amazon Q Developer
Free Tier
0 USD (pricing page)
Pro Tier
19 USD per user per month (pricing page, no indication whether incl. VAT; according to AWS Tax Help, AWS Europe charges VAT on service charges for accounts in the EU)
GitHub Copilot
Free
0 USD (q2)
Student
0 USD for verified students (q2)
Pro
10 USD/month (q2; free of charge for some user groups)
Pro+
39 USD/month (q2)
Max
100 USD/month (q2)
Business
19 USD per assigned seat/month (q2)
Enterprise
39 USD per assigned seat/month (q2)
: Amazon Q Developeryesall 2 plans; GitHub Copilotyesall 7 plans; Amazon Q Developer
Free Tier
yes (50 agentic requests per month in IDE/CLI; Java upgrade transformation up to 1,000 lines of code per month; console Q&A)
Pro Tier
yes (extended limits for agentic requests, according to the FAQ 10,000 inference calls per month or around 1,000 user requests; Java/.NET transformation up to 4,000 lines of code per user in the pool; admin dashboard, IP indemnity)
GitHub Copilot
Free
yes (limited: according to q2, an allowance of GitHub AI Credits, automatic model selection; according to q1, 2000 completions and 50 chat requests)
Student
yes (allowance of GitHub AI Credits, automatic model selection, without third-party agents; q2)
Pro
yes (base 1,000 AI Credits; q2)
Pro+
yes (base 3,900 AI Credits, access to premium models; q2)
Max
yes (base 10,000 AI Credits, priority access to premium models; q2)
Business
yes (1,900 AI Credits per user/month, access to premium models; q2)
Enterprise
yes (3,900 AI Credits per user/month, priority access to premium models; q2; requires GitHub Enterprise Cloud)

Evidence

: Amazon Q Developer12 sources; GitHub Copilot13 sources; Amazon Q Developer
Amazon Q Developer PricingPricing page, retrieved 14 Oct 2026
Amazon Q Developer FAQsDocumentation, retrieved 14 Oct 2026
AWS Sub-processors (as of 2026-07-28)Sub-processor list, retrieved 14 Oct 2026
AWS GDPR CenterPrivacy notice, retrieved 14 Oct 2026
Cross-region processing in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026
Supported Regions for Amazon Q DeveloperDocumentation, retrieved 14 Oct 2026
Amazon Q Developer Pro Region supportDocumentation, retrieved 18 Oct 2026
Data storage in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026
Amazon Q Developer service improvementDocumentation, retrieved 18 Oct 2026
Opt out of data sharing in the IDE and command lineDocumentation, retrieved 18 Oct 2026
AWS Service Terms (as of 2026-10-13)Terms and conditions, retrieved 18 Oct 2026
AWS Tax Help – European UnionHelp centre, retrieved 18 Oct 2026
All details on the tool page
GitHub Copilot
GitHub Copilot: Plans & pricing incl. FAQ (Privacy, Retention, Training)Pricing page / provider FAQ, retrieved 18 Oct 2026
Plans for GitHub Copilot (GitHub Docs)Official documentation, retrieved 14 Oct 2026
Hosting of models for GitHub Copilot (GitHub Docs)Official documentation, retrieved 18 Oct 2026
GitHub SubprocessorsSub-processor list, retrieved 14 Oct 2026
About storage of your data with data residency (GHE.com)Official documentation, retrieved 14 Oct 2026
GitHub Copilot with data residencyOfficial documentation, retrieved 14 Oct 2026
About GitHub Enterprise Cloud with data residencyOfficial documentation, retrieved 14 Oct 2026
Resources for getting approval of GitHub CopilotOfficial documentation, retrieved 14 Oct 2026
GitHub General Privacy Statement (effective 2026-04-27)Privacy notices, retrieved 14 Oct 2026
GitHub Data Protection Agreement (DPA), version October 2025DPA, retrieved 14 Oct 2026
Managing GitHub Copilot policies as an individual subscriber (GitHub Docs)Documentation, retrieved 18 Oct 2026
GitHub Copilot Trust Center: FAQ (Privacy, Security, Commercial)Trust Center / provider FAQ, retrieved 18 Oct 2026
Access GitHub Copilot for free as a student (GitHub Docs)Official documentation, retrieved 18 Oct 2026
All details on the tool page

not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.

No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.

More comparisons

Amazon Q Developer compared with

GitHub Copilot compared with

Individual pages: Amazon Q Developer, GitHub Copilot. All tools in the category: Software development.