Amazon Q Developer vs. Tabnine: data protection per plan

yes (AWS Service Terms, section 1.14.1: 'These Service Terms incorporate the AWS Data Processing Addendum ("DPA"), when you use AWS Services to process Customer Data'; no exception for the Free Tier is stated there; section 50.13 additionally governs the use of Free Tier content for service improvement)

yes (according to the GDPR Center, the AWS GDPR DPA, including standard contractual clauses, is part of the AWS Service Terms and applies automatically)

not publicly documented (Trust Center lists a Master Services Agreement, no DPA; Privacy Policy describes Tabnine as processor when used for organisations, but does not refer to any DPA)

not publicly documented (Trust Center lists a Master Services Agreement, no DPA; Privacy Policy describes Tabnine as processor when used for organisations, but does not refer to any DPA)

FAQ and documentation 'Amazon Q Developer service improvement': in the Free Tier, content (questions, responses, generated code) may be used for service improvement, according to the documentation including 'for model training'. Service Terms 50.13: Amazon Q Content may be used to improve Amazon Q and, for that purpose, stored outside the AWS Region in use; content that does not contain personal data may also be used to train other AWS ML models. Opt-out depending on the environment: IDE/command line via the setting 'Share Amazon Q content with AWS' or 'Amazon Q: Share Content'; console/mobile app/AWS websites/chat applications via an AI services opt-out policy in AWS Organizations. Telemetry (without code) can be switched off separately. Pricing page: 'Opt-out available'.

FAQ: Amazon Q Developer Pro and Amazon Q Business do not use content for service improvement; content from the Pro Tier is not used to train underlying foundation models. Telemetry/usage metrics may be collected (opt-out in the IDE settings). Pricing page: 'Automatically opted out'.

Docs 'Privacy': 'no-train-no-retain' policy for Tabnine models; Tabnine does not store code, does not share code with third parties and does not train on customer code. Tabnine's code completion and Protected Chat model are stated to be trained only on open-source code under permissive licences; private fine-tuned models (team opt-in) accessible only to the team. Optional third-party chat models: privacy rules and protection may differ (Docs 'AI Models'). Terms of Use (as of 2024-07-25): Tabnine uses code developed during use only to improve the service for that specific customer, not for other users; "Tailor Made" models only at express request.

Docs 'Privacy': 'no-train-no-retain' policy for Tabnine models; Tabnine does not store code, does not share code with third parties and does not train on customer code. Tabnine's code completion and Protected Chat model are stated to be trained only on open-source code under permissive licences; private fine-tuned models (team opt-in) accessible only to the team. Optional third-party chat models: privacy rules and protection may differ (Docs 'AI Models'). Docs: even with private deployment, code in the context window remains ephemeral; in self-hosted operation, clusters send metrics and logs to Tabnine servers, in air-gapped operation they do not. According to the Docs, no code and no PII are sent in the process. Terms of Use (as of 2024-07-25): Tabnine uses code developed during use only to improve the service for that specific customer, not for other users; "Tailor Made" models only at express request.

Documentation 'Data storage in Amazon Q Developer': in the Free Tier, content is stored in a US Region (console error diagnosis: US West/Oregon, everything else: US East/N. Virginia). Cross-region inference may route requests to other Regions within the geography. Service Terms 50.13.1: content used for service improvement may be stored outside the Region in use. The sub-processor list names Canada, Germany, the Netherlands and the USA as locations of the AWS entities that process Free Tier content for service improvement (only without opt-out).

Documentation 'Amazon Q Developer Pro Region support': the Q Developer console and profile are available in US East (N. Virginia) and Europe (Frankfurt); Pro via a personal Builder ID only in US East (N. Virginia). Documentation 'Data storage': in the Pro Tier, content is stored in the profile Region only for the following features: Q chat in the AWS console, error diagnosis in the console, Q in Eclipse, JetBrains, VS Code and Visual Studio, and Q on the command line; for all other features 'your content may be stored and processed in a US Region' (can be blocked via a service control policy). Exceptions include: Amazon Q artifacts (visualisations) in a US Region; Console to Code stored in the console Region and processed in a US Region; CloudWatch investigations possibly in other Regions. Not available for profiles in Frankfurt: support chat, troubleshooting resources, .NET transformation in the IDE, Slack integration, Console Mobile App, GitLab Duo with Amazon Q, Amazon Q for GitHub. Cross-region inference stays within the geography (Europe: Frankfurt, Ireland, Paris, Stockholm).

Security documentation: SaaS on AWS (North Virginia, USA) and Google Cloud (Council Bluffs, Iowa, USA), plus Heroku (Virginia, USA) as main locations. Docs 'Deployment options': Secure SaaS is 'hosted, managed, and monitored by Tabnine', without stating a location. The Trust Center names Google Cloud Platform under 'Infrastructure'. An EU region or choice of region is not documented.

Operation and location are the customer's responsibility (data centre or supported cloud provider). Telemetry: in self-hosted operation, metrics, logs and client telemetry go to Tabnine servers, location not documented.

• Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country)
• AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt)
• Amazon Bedrock (LLM inference; cross-region inference within the geography)
• The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement

• Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country)
• AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt)
• Amazon Bedrock (LLM inference; cross-region inference within the geography)
• The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement

• Hosting providers according to the security documentation: Amazon Web Services (main data centre North Virginia, USA), Google Cloud Platform (Council Bluffs, Iowa, USA), Heroku (Virginia, USA)
• Google Cloud Identity (identity management according to the security documentation)
• Optional third-party chat models (depending on selection): Anthropic Claude, OpenAI GPT, Google Gemini and others; according to the documentation, privacy rules of these models may differ
• According to the Privacy Policy, also payment service providers, analytics and marketing service providers as well as affiliated companies (e.g. Tabnine Inc.), without names
• Complete sub-processor list: not publicly documented (tabnine.com/subprocessors still returns HTTP 502 when retrieved on 2026-10-18; the Trust Center contains no sub-processor list)

• No operation by Tabnine; optionally connected third-party models via private endpoints at the customer's choice
• Telemetry recipient: Tabnine servers (hosting as for SaaS according to the security documentation: AWS, GCP, Heroku in the USA)

0 USD (pricing page)

19 USD per user per month (pricing page, no indication whether incl. VAT; according to AWS Tax Help, AWS Europe charges VAT on service charges for accounts in the EU)

not publicly documented (tabnine.com/pricing redirects to the Tricentis contact form; Terms: fees in USD, excluding taxes)

not publicly documented (tabnine.com/pricing redirects to the Tricentis contact form)

yes (50 agentic requests per month in IDE/CLI; Java upgrade transformation up to 1,000 lines of code per month; console Q&A)

yes (extended limits for agentic requests, according to the FAQ 10,000 inference calls per month or around 1,000 user requests; Java/.NET transformation up to 4,000 lines of code per user in the pool; admin dashboard, IP indemnity)

yes (code completion, chat, agent, CLI, context engine; Tabnine's own models as well as optional third-party models)

yes (as SaaS; models run in the customer's own data centre or VPC, private endpoints for further models)