Vendor record · qodo.ai
What Qodo promises about your data.
Where Qodo publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
We haven't found a sub-processor list from Qodo anywhere we've looked.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at www.qodo.ai/data-processing-addendum/ (read August 31, 2026) gives you 30 days' notice.
- Window
- 30
- Pages
- 5
- Copies
- 6
days' notice when it adds a sub-processor
pages we watch
dated copies of all its pages, since August 31, 2026
Qodo DPA
Qodo's data processing agreement gives 30 days' notice before a new sub-processor is engaged. Here is the clause, from our August 31, 2026 copy:
30
days' notice
“SUBCONTRACTING Service Provider may subcontract its obligations under this Data Processing Addendum to another person or entity (“Contractor(s)“) who shall act as Service Provider’s Sub-processor (as such term is defined in the Data Protection Laws), as stated in Exhibit A attached hereto. Service Provider shall inform the Customer of any intended changes concerning the addition/replacement of its Contractors at least 30 days prior to such change and Customer does not legitimately object to such changes within that time frame.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Qodo published it.
www.qodo.ai/data-processing-addendum/ · read 2026-08-31 · fingerprint 3e42a483a4fd8b1c…
Qodo sub-processors
We have not found a sub-processor list published by Qodo anywhere we looked.
Every public change we have recorded · Where vendors publish their lists
How long Qodo keeps your data
We hold no statement about data retention from Qodo's watched pages. The pages we watch: data processing agreement www.qodo.ai/data-processing-addendum/; pricing page qodo.ai/pricing; privacy policy qodo.ai/privacy-policy; terms of service qodo.ai/terms; trust and security page www.qodo.ai/blog/qodo-security-our-commitment-to-data-privacy-and-security/. On training with customer data, Qodo's trust and security page (www.qodo.ai/blog/qodo-security-our-commitment-to-data-privacy-and-security/, in the copy read August 31, 2026) says: “Users can log into the portal at https://app.qodo.ai/?product_type=qodo-merge&product_source=marketing to request to opt out of data usage for model training or to delete their account entirely. ## Data Retention and Usage Data of our paid subscribers (or within the trial periods) will never ever be used to train our AI models.”
Training on customer data
“Other than the Customer Data, all intellectual property rights in and to the Website, Platform, Services, Qodo Content, and any part thereof, including any and all derivatives, changes and improvements thereof lie exclusively with Qodo and its licensors.”
qodo.ai/terms · read 2026-08-31
Training on customer data
“Our revenue is generated from the Teams and Enterprise plans, which come with additional features tailored to the operational scale of larger organizations, such as specialized hosting solutions and tools for preparing pull requests. [blog-subscribe] ## Responsible Data Utilization We use data from our free-tier users to improve our AI models, ensuring that we generate meaningful test suites,…”
www.qodo.ai/blog/qodo-security-our-commitment-to-data-privacy-and-security/ · read 2026-08-31
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Certifications the trust page names · SOC 2 Type II
The pages' own stamps: Last Revised 2025-02-20 · Last Updated 2025-02-17
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Trust and security
www.qodo.ai/blog/qodo-security-our-commitment-to-data-privacy-and-security/2026-10-11
Where we get nothing
What Qodo does not publish where we can read it
Of the 5 public pages we watch for Qodo, these give us nothing right now.
Sub-processor list
we have not found one published anywhere we looked
Before you conclude anything
This only means we couldn’t read it on a public page. Qodo may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Qodo. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Qodo? With an email at qodo.ai you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Qodo in your product? Hear the morning we read a change.
You get the lines that moved, in Qodo’s own words, and the date any window closes. No card. Nothing to cancel.