Amazon Q Developer vs. Windsurf: data protection per plan
Amazon Q Developer (2 plans) and Windsurf (5 plans) side by side: DPA, training on inputs, hosting and data retention per plan, based on the providers’ public documents. Without rating.
Last updated: (latest review date of the tools shown)
At a glance
Each value is listed with the plans it applies to. Pick a tier to see only plans of that tier; if plans are chosen in the plan comparison below, the table shows exactly those.
All plans: each value is listed with the plans it applies to.
| Feature | Amazon Q Developer | Windsurf |
|---|---|---|
| Provider based in | Depending on the account country: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg | Cognition AI, Inc., 550 Third Street, San Francisco, CA 94107, USA |
| Plans recorded | 2 | 5 |
| Hosting | mixed: Free TierEU option: Pro Tier | US only: Free, Pro, Max, Teamsnot documented: Enterprise |
| Training on inputs | opt-out available: Free Tierno: Pro Tier | yes: Freeopt-out available: Pro, Max, Teamsno: Enterprise |
| DPA | yes: all 2 plans | yes: all 5 plans |
| As of | 18 Oct 2026 | 18 Oct 2026 |
Plans compared
Comparing: Amazon Q Developer Pro Tier vs. Windsurf Teams
| Feature | Amazon Q DeveloperPro Tier | WindsurfTeams |
|---|---|---|
| yes | yes | |
| Details: DPA available | yes (according to the GDPR Center, the AWS GDPR DPA, including standard contractual clauses, is part of the AWS Service Terms and applies automatically) Provider’s DPA | yes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum) Provider’s DPA |
| differs by plan | no | opt-out available |
| Details: Training on inputs | FAQ: Amazon Q Developer Pro and Amazon Q Business do not use content for service improvement; content from the Pro Tier is not used to train underlying foundation models. Telemetry/usage metrics may be collected (opt-out in the IDE settings). Pricing page: 'Automatically opted out'. | Platform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. On paid plans, an opt-out is available; after that, the data is not used for any other purpose including training, and Zero Data Retention (ZDR) is enabled with the model providers. On the Teams plan, only an administrator can exercise the opt-out. Default according to the documentation: training enabled. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law. |
| differs by plan | EU option | US only |
| Details: Data residency | Documentation 'Amazon Q Developer Pro Region support': the Q Developer console and profile are available in US East (N. Virginia) and Europe (Frankfurt); Pro via a personal Builder ID only in US East (N. Virginia). Documentation 'Data storage': in the Pro Tier, content is stored in the profile Region only for the following features: Q chat in the AWS console, error diagnosis in the console, Q in Eclipse, JetBrains, VS Code and Visual Studio, and Q on the command line; for all other features 'your content may be stored and processed in a US Region' (can be blocked via a service control policy). Exceptions include: Amazon Q artifacts (visualisations) in a US Region; Console to Code stored in the console Region and processed in a US Region; CloudWatch investigations possibly in other Regions. Not available for profiles in Frankfurt: support chat, troubleshooting resources, .NET transformation in the IDE, Slack integration, Console Mobile App, GitLab Duo with Amazon Q, Amazon Q for GitHub. Cross-region inference stays within the geography (Europe: Frankfurt, Ireland, Paris, Stockholm). | DPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented. |
| list available | list available | |
| Details: List published |
|
|
| differs by plan | FAQ and documentation 'Data storage'… | DPA |
| Details: Data retention | FAQ and documentation 'Data storage': content is stored to generate responses and to provide the service; according to the documentation, 'We do not use content from Amazon Q Developer Pro or Amazon Q Business for service improvement'; encryption at rest and in transit. Specific retention period: not publicly documented. | DPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. After opt-out: Zero Data Retention with model providers (data not persistently stored and deleted once the output is generated, Platform Terms 1.8). Without opt-out, specific retention periods not publicly documented. |
| differs by plan | 19 USD/user/mo | 80 USD/mo… (further prices in the details) |
| Details: Price | 19 USD per user per month (pricing page, no indication whether incl. VAT; according to AWS Tax Help, AWS Europe charges VAT on service charges for accounts in the EU) | 80 USD per month for the team plan plus 40 USD per month per full dev seat (pricing page, no information on taxes); up to 200 users. |
| yes | yes | |
| Details: AI features included | yes (extended limits for agentic requests, according to the FAQ 10,000 inference calls per month or around 1,000 user requests; Java/.NET transformation up to 4,000 lines of code per user in the pool; admin dashboard, IP indemnity) | yes (Pro plus up to 200 users, sharing and collaboration, centralised billing, admin dashboard with analytics, priority support; according to the FAQ, Devin Desktop only with a full seat, each full seat with 40 USD of usage per month across all Devin products) |
| 11 sources | 6 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- Amazon Q Developer Pro Tieryes
- Windsurf Teamsyes
- Amazon Q Developer Pro Tier
yes (according to the GDPR Center, the AWS GDPR DPA, including standard contractual clauses, is part of the AWS Service Terms and applies automatically)
Provider’s DPAWindsurf Teamsyes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA
Training
- differs by plan
- Amazon Q Developer Pro Tierno
- Windsurf Teamsopt-out available
- Amazon Q Developer Pro Tier
FAQ: Amazon Q Developer Pro and Amazon Q Business do not use content for service improvement; content from the Pro Tier is not used to train underlying foundation models. Telemetry/usage metrics may be collected (opt-out in the IDE settings). Pricing page: 'Automatically opted out'.
Windsurf TeamsPlatform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. On paid plans, an opt-out is available; after that, the data is not used for any other purpose including training, and Zero Data Retention (ZDR) is enabled with the model providers. On the Teams plan, only an administrator can exercise the opt-out. Default according to the documentation: training enabled. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law.
Hosting
- differs by plan
- Amazon Q Developer Pro TierEU option
- Windsurf TeamsUS only
- Amazon Q Developer Pro Tier
Documentation 'Amazon Q Developer Pro Region support': the Q Developer console and profile are available in US East (N. Virginia) and Europe (Frankfurt); Pro via a personal Builder ID only in US East (N. Virginia). Documentation 'Data storage': in the Pro Tier, content is stored in the profile Region only for the following features: Q chat in the AWS console, error diagnosis in the console, Q in Eclipse, JetBrains, VS Code and Visual Studio, and Q on the command line; for all other features 'your content may be stored and processed in a US Region' (can be blocked via a service control policy). Exceptions include: Amazon Q artifacts (visualisations) in a US Region; Console to Code stored in the console Region and processed in a US Region; CloudWatch investigations possibly in other Regions. Not available for profiles in Frankfurt: support chat, troubleshooting resources, .NET transformation in the IDE, Slack integration, Console Mobile App, GitLab Duo with Amazon Q, Amazon Q for GitHub. Cross-region inference stays within the geography (Europe: Frankfurt, Ireland, Paris, Stockholm).
Windsurf TeamsDPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented.
Sub-processors
- Amazon Q Developer Pro Tierlist available
- Windsurf Teamslist available
- Amazon Q Developer Pro Tier
- Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country)
- AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt)
- Amazon Bedrock (LLM inference; cross-region inference within the geography)
- The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement
Windsurf Teams- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
Retention
- differs by plan
- Amazon Q Developer Pro TierFAQ and documentation 'Data storage'…
- Windsurf TeamsDPA
- Amazon Q Developer Pro TierFAQ and documentation 'Data storage': content is stored to generate responses and to provide the service; according to the documentation, 'We do not use content from Amazon Q Developer Pro or Amazon Q Business for service improvement'; encryption at rest and in transit. Specific retention period: not publicly documented.Windsurf TeamsDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. After opt-out: Zero Data Retention with model providers (data not persistently stored and deleted once the output is generated, Platform Terms 1.8). Without opt-out, specific retention periods not publicly documented.
Price
- differs by plan
- Amazon Q Developer Pro Tier19 USD/user/mo
- Windsurf Teams80 USD/mo… (further prices in the details)
- Amazon Q Developer Pro Tier
19 USD per user per month (pricing page, no indication whether incl. VAT; according to AWS Tax Help, AWS Europe charges VAT on service charges for accounts in the EU)
Windsurf Teams80 USD per month for the team plan plus 40 USD per month per full dev seat (pricing page, no information on taxes); up to 200 users.
- Amazon Q Developer Pro Tieryes
- Windsurf Teamsyes
- Amazon Q Developer Pro Tier
yes (extended limits for agentic requests, according to the FAQ 10,000 inference calls per month or around 1,000 user requests; Java/.NET transformation up to 4,000 lines of code per user in the pool; admin dashboard, IP indemnity)
Windsurf Teamsyes (Pro plus up to 200 users, sharing and collaboration, centralised billing, admin dashboard with analytics, priority support; according to the FAQ, Devin Desktop only with a full seat, each full seat with 40 USD of usage per month across all Devin products)
Evidence
- Amazon Q Developer Pro Tier11 sources
- Windsurf Teams6 sources
- Amazon Q Developer Pro Tier
- Amazon Q Developer PricingPricing page, retrieved 14 Oct 2026
- Amazon Q Developer FAQsDocumentation, retrieved 14 Oct 2026
- AWS Sub-processors (as of 2026-07-28)Sub-processor list, retrieved 14 Oct 2026
- AWS GDPR CenterPrivacy notice, retrieved 14 Oct 2026
- Cross-region processing in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026
- Supported Regions for Amazon Q DeveloperDocumentation, retrieved 14 Oct 2026
- Amazon Q Developer Pro Region supportDocumentation, retrieved 18 Oct 2026
- Data storage in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026
- Amazon Q Developer service improvementDocumentation, retrieved 18 Oct 2026
- AWS Service Terms (as of 2026-10-13)Terms and conditions, retrieved 18 Oct 2026
- AWS Tax Help – European UnionHelp centre, retrieved 18 Oct 2026
Windsurf Teams- Plans and Pricing (windsurf.com/pricing redirects here)Pricing page, retrieved 18 Oct 2026
- Docs: Devin Desktop FAQ (transition from Windsurf)Documentation, retrieved 18 Oct 2026
- Platform Terms of Service (Last updated: 2026-06-30)Terms and conditions, retrieved 18 Oct 2026
- Data Processing Addendum (Last updated: 2026-07-23, with sub-processor list in Appendix C)DPA, retrieved 18 Oct 2026
- Privacy Policy (Last updated: 2026-03-09)Privacy notice, retrieved 18 Oct 2026
- Docs: Security at Cognition (windsurf.com/security redirects here)Documentation, retrieved 18 Oct 2026
| Feature | Amazon Q Developer | Windsurf |
|---|---|---|
| yesall 2 plans | yesall 5 plans | |
| Details: DPA available |
|
|
| differs by tool |
|
|
| Details: Training on inputs |
|
|
| differs by tool |
|
|
| Details: Data residency |
|
|
| list availableall 2 plans | list availableall 5 plans | |
| Details: List published |
|
|
| differs by tool |
| DPAall 5 plans |
| Details: Data retention |
|
|
| differs by tool |
|
|
| Details: Price |
|
|
| yesall 2 plans | yesall 5 plans | |
| Details: AI features included |
|
|
| 12 sources | 8 sources | |
| Details: Sources with retrieval date |
|
|
Contract / DPA
- Amazon Q Developeryesall 2 plans
- Windsurfyesall 5 plans
- Amazon Q Developer
- Free Tier
yes (AWS Service Terms, section 1.14.1: 'These Service Terms incorporate the AWS Data Processing Addendum ("DPA"), when you use AWS Services to process Customer Data'; no exception for the Free Tier is stated there; section 50.13 additionally governs the use of Free Tier content for service improvement)
Provider’s DPA - Pro Tier
yes (according to the GDPR Center, the AWS GDPR DPA, including standard contractual clauses, is part of the AWS Service Terms and applies automatically)
Provider’s DPA
Windsurf- Free
yes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA - Pro
yes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA - Max
yes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA - Teams
yes (Platform Terms 4.2: where personal data is processed, the Data Processing Addendum at cognition.ai/dpa applies; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA - Enterprise
yes (Enterprise Terms 4.3: the Data Processing Addendum at cognition.com/dpa is incorporated into the agreement; EU SCCs Module Two/Three, UK Addendum)
Provider’s DPA
- Free Tier
Training
- differs by tool
- Amazon Q Developer
- opt-out availableFree Tier
- noPro Tier
- Windsurf
- yesFree
- opt-out availablePro, Max, Teams
- noEnterprise
- Amazon Q Developer
- Free Tier
FAQ and documentation 'Amazon Q Developer service improvement': in the Free Tier, content (questions, responses, generated code) may be used for service improvement, according to the documentation including 'for model training'. Service Terms 50.13: Amazon Q Content may be used to improve Amazon Q and, for that purpose, stored outside the AWS Region in use; content that does not contain personal data may also be used to train other AWS ML models. Opt-out depending on the environment: IDE/command line via the setting 'Share Amazon Q content with AWS' or 'Amazon Q: Share Content'; console/mobile app/AWS websites/chat applications via an AI services opt-out policy in AWS Organizations. Telemetry (without code) can be switched off separately. Pricing page: 'Opt-out available'.
- Pro Tier
FAQ: Amazon Q Developer Pro and Amazon Q Business do not use content for service improvement; content from the Pro Tier is not used to train underlying foundation models. Telemetry/usage metrics may be collected (opt-out in the IDE settings). Pricing page: 'Automatically opted out'.
Windsurf- Free
Platform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. An opt-out is only available on paid plans ("If you subscribe to a paid Service Tier, you may opt out of this use"); no opt-out is documented for Free. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law.
- Pro
Platform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. On paid plans, an opt-out is available; after that, the data is not used for any other purpose including training, and Zero Data Retention (ZDR) is enabled with the model providers. Default according to the documentation: training enabled, opt-out at any time in the Data Controls settings. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law.
- Max
Platform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. On paid plans, an opt-out is available; after that, the data is not used for any other purpose including training, and Zero Data Retention (ZDR) is enabled with the model providers. Default according to the documentation: training enabled, opt-out at any time in the Data Controls settings. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law.
- Teams
Platform Terms (as of 2026-06-30) 3.3.1: Cognition may use Customer Data for model training and to improve the Services. On paid plans, an opt-out is available; after that, the data is not used for any other purpose including training, and Zero Data Retention (ZDR) is enabled with the model providers. On the Teams plan, only an administrator can exercise the opt-out. Default according to the documentation: training enabled. Exceptions under 3.3.3: ZDR does not preclude retention or disclosure of data flagged by abuse-detection classifiers, needed for safety, security and AUP compliance review, or compelled by law.
- Enterprise
Enterprise Terms (as of 2026-06-08) 3.3: Cognition does not use, or permit any third party to use, Customer Data to train AI models without the customer's express prior written consent; Usage Data may be used for internal analytics. Documentation: "If you are an Enterprise customer, we will never train on your data without your express prior written consent." DPA (as of 2026-07-23) section 4: sub-processors are subject to equivalent restrictions.
- Free Tier
Hosting
- differs by tool
- Amazon Q Developer
- mixedFree Tier
- EU optionPro Tier
- Windsurf
- US onlyFree, Pro, Max, Teams
- not publicly documentedEnterprise
- Amazon Q Developer
- Free Tier
Documentation 'Data storage in Amazon Q Developer': in the Free Tier, content is stored in a US Region (console error diagnosis: US West/Oregon, everything else: US East/N. Virginia). Cross-region inference may route requests to other Regions within the geography. Service Terms 50.13.1: content used for service improvement may be stored outside the Region in use. The sub-processor list names Canada, Germany, the Netherlands and the USA as locations of the AWS entities that process Free Tier content for service improvement (only without opt-out).
- Pro Tier
Documentation 'Amazon Q Developer Pro Region support': the Q Developer console and profile are available in US East (N. Virginia) and Europe (Frankfurt); Pro via a personal Builder ID only in US East (N. Virginia). Documentation 'Data storage': in the Pro Tier, content is stored in the profile Region only for the following features: Q chat in the AWS console, error diagnosis in the console, Q in Eclipse, JetBrains, VS Code and Visual Studio, and Q on the command line; for all other features 'your content may be stored and processed in a US Region' (can be blocked via a service control policy). Exceptions include: Amazon Q artifacts (visualisations) in a US Region; Console to Code stored in the console Region and processed in a US Region; CloudWatch investigations possibly in other Regions. Not available for profiles in Frankfurt: support chat, troubleshooting resources, .NET transformation in the IDE, Slack integration, Console Mobile App, GitLab Duo with Amazon Q, Amazon Q for GitHub. Cross-region inference stays within the geography (Europe: Frankfurt, Ireland, Paris, Stockholm).
Windsurf- Free
DPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented.
- Pro
DPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented.
- Max
DPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented.
- Teams
DPA (as of 2026-07-23), Appendix C: all named sub-processors for core processing, profile data, logs and model inference are located in the United States; support workflow via Agumbe (Cognition India) in India. Privacy Policy (as of 2026-03-09): Cognition and its service providers may transfer and process data throughout the world, including the EU, UK and US. A selectable EU region is not documented.
- Enterprise
Standard SaaS according to DPA Appendix C (as of 2026-07-23) with sub-processors in the United States, support workflow in India. Pricing page: Enterprise with "Dedicated deployment option" and deployment in the customer's own VPC; documentation: FedRAMP deployment on AWS GovCloud. Regions of the dedicated or VPC deployment not publicly documented; an EU region is not documented.
- Free Tier
Sub-processors
- Amazon Q Developerlist availableall 2 plans
- Windsurflist availableall 5 plans
- Amazon Q Developer
- Free Tier
- Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country)
- AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt)
- Amazon Bedrock (LLM inference; cross-region inference within the geography)
- The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement
- Pro Tier
- Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (contracting party, depending on the account country)
- AWS infrastructure entities per region (e.g. A100 ROW GmbH, region Europe/Frankfurt)
- Amazon Bedrock (LLM inference; cross-region inference within the geography)
- The sub-processor list (section 'AWS entities providing service improvement') names the locations Canada, Germany, the Netherlands, US for 'Amazon Q Developer Free Tier / Kiro Free Tier / Individual Subscriber'; applies provided the customer has not objected to use for service improvement
Windsurf- Free
- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
- Pro
- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
- Max
- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
- Teams
- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
- Enterprise
- Microsoft Azure, AWS and Google Cloud: core processing, for AWS and Google Cloud also profile data, logs and indices (United States)
- Auth0 (profile data); Hex, Sentry and Datadog (system logs) (United States)
- Zendesk and Pylon (support contacts), Decagon (support chatbot) (United States); Agumbe (Cognition India, support workflow) (India)
- Model providers, to the extent inputs contain personal data: OpenAI, Anthropic, Microsoft/Azure, Google/Vertex (United States); Databricks, xAI, Snowflake only if enabled in Devin Desktop (United States)
- Free Tier
Retention
- differs by tool
- Amazon Q Developer
- FAQ and documentation 'Data storage': AWS…Free Tier
- FAQ and documentation 'Data storage'…Pro Tier
- WindsurfDPAall 5 plans
- Amazon Q Developer
- Free TierFAQ and documentation 'Data storage': AWS stores questions, responses and additional context (console metadata, code) to generate responses and may retain content for service improvement unless an opt-out has been made; encryption at rest and in transit. Specific retention period: not publicly documented (the Service Terms state a period of up to 60 days only for Kiro Free Tier, not for Amazon Q Developer).
- Pro TierFAQ and documentation 'Data storage': content is stored to generate responses and to provide the service; according to the documentation, 'We do not use content from Amazon Q Developer Pro or Amazon Q Business for service improvement'; encryption at rest and in transit. Specific retention period: not publicly documented.
Windsurf- FreeDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. Without opt-out, ZDR with model providers is not committed; specific retention periods for prompts and code not publicly documented.
- ProDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. After opt-out: Zero Data Retention with model providers (data not persistently stored and deleted once the output is generated, Platform Terms 1.8). Without opt-out, specific retention periods not publicly documented.
- MaxDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. After opt-out: Zero Data Retention with model providers (data not persistently stored and deleted once the output is generated, Platform Terms 1.8). Without opt-out, specific retention periods not publicly documented.
- TeamsDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. After opt-out: Zero Data Retention with model providers (data not persistently stored and deleted once the output is generated, Platform Terms 1.8). Without opt-out, specific retention periods not publicly documented.
- EnterpriseDPA (as of 2026-07-23): processing during the term of the agreement and for 30 days after termination; sub-processors delete within 30 days of termination. Privacy Policy: retention as long as needed to provide the Service or for legal reasons, without specific periods. Specific retention periods for prompts and code in Enterprise agreements not publicly documented.
Price
- differs by tool
- Amazon Q Developer
- 0 USDFree Tier
- 19 USD/user/moPro Tier
- Windsurf
- 0 USD/moFree
- 20 USD/moPro
- 200 USD/moMax
- 80 USD/mo… (further prices in the details)Teams
- customEnterprise
- Amazon Q Developer
- Free Tier
0 USD (pricing page)
- Pro Tier
19 USD per user per month (pricing page, no indication whether incl. VAT; according to AWS Tax Help, AWS Europe charges VAT on service charges for accounts in the EU)
Windsurf- Free
0 USD per month (pricing page)
- Pro
20 USD per month (pricing page, no information on taxes); extra usage at API pricing. Quotas refresh daily and weekly (FAQ).
- Max
200 USD per month (pricing page, no information on taxes); extra usage at API pricing.
- Teams
80 USD per month for the team plan plus 40 USD per month per full dev seat (pricing page, no information on taxes); up to 200 users.
- Enterprise
Price on request (pricing page: "Let's talk")
- Free Tier
- Amazon Q Developeryesall 2 plans
- Windsurfyesall 5 plans
- Amazon Q Developer
- Free Tier
yes (50 agentic requests per month in IDE/CLI; Java upgrade transformation up to 1,000 lines of code per month; console Q&A)
- Pro Tier
yes (extended limits for agentic requests, according to the FAQ 10,000 inference calls per month or around 1,000 user requests; Java/.NET transformation up to 4,000 lines of code per user in the pool; admin dashboard, IP indemnity)
Windsurf- Free
yes (light quota for agents, limited model availability, unlimited inline edits and Tab completions)
- Pro
yes (Free plus higher quotas with frontier models from OpenAI, Claude, Gemini and SpaceXAI as well as open-source models, full model availability, SWE-2, cloud agents (Devin Cloud), extra usage at API pricing)
- Max
yes (Pro plus significantly higher quotas)
- Teams
yes (Pro plus up to 200 users, sharing and collaboration, centralised billing, admin dashboard with analytics, priority support; according to the FAQ, Devin Desktop only with a full seat, each full seat with 40 USD of usage per month across all Devin products)
- Enterprise
yes (highest priority support, dedicated account management, SAML/OIDC SSO, centralised enterprise admin controls, teamspace isolation, dedicated deployment option or deployment in the customer's VPC, custom terms)
- Free Tier
Evidence
- Amazon Q Developer12 sources
- Windsurf8 sources
- Amazon Q Developer
- Amazon Q Developer PricingPricing page, retrieved 14 Oct 2026
- Amazon Q Developer FAQsDocumentation, retrieved 14 Oct 2026
- AWS Sub-processors (as of 2026-07-28)Sub-processor list, retrieved 14 Oct 2026
- AWS GDPR CenterPrivacy notice, retrieved 14 Oct 2026
- Cross-region processing in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026
- Supported Regions for Amazon Q DeveloperDocumentation, retrieved 14 Oct 2026
- Amazon Q Developer Pro Region supportDocumentation, retrieved 18 Oct 2026
- Data storage in Amazon Q DeveloperDocumentation, retrieved 18 Oct 2026
- Amazon Q Developer service improvementDocumentation, retrieved 18 Oct 2026
- Opt out of data sharing in the IDE and command lineDocumentation, retrieved 18 Oct 2026
- AWS Service Terms (as of 2026-10-13)Terms and conditions, retrieved 18 Oct 2026
- AWS Tax Help – European UnionHelp centre, retrieved 18 Oct 2026
Windsurf- Plans and Pricing (windsurf.com/pricing redirects here)Pricing page, retrieved 18 Oct 2026
- Docs: Devin Desktop FAQ (transition from Windsurf)Documentation, retrieved 18 Oct 2026
- Platform Terms of Service (Last updated: 2026-06-30)Terms and conditions, retrieved 18 Oct 2026
- Enterprise Terms of Service (Last updated: 2026-06-08)Terms and conditions, retrieved 18 Oct 2026
- Data Processing Addendum (Last updated: 2026-07-23, with sub-processor list in Appendix C)DPA, retrieved 18 Oct 2026
- Privacy Policy (Last updated: 2026-03-09)Privacy notice, retrieved 18 Oct 2026
- Docs: Security at Cognition (windsurf.com/security redirects here)Documentation, retrieved 18 Oct 2026
- Docs: FedRAMP Security Admin Guide (Devin Desktop)Documentation, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
No guarantee of accuracy, not legal advice. Each entry is valid as of the date shown. Open points are listed on the detail pages.
More comparisons
Amazon Q Developer compared with
Individual pages: Amazon Q Developer, Windsurf. All tools in the category: Software development.