Vendor record · sourcegraph.com
What Sourcegraph promises about your data.
Where Sourcegraph publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
We haven't found a sub-processor list from Sourcegraph anywhere we've looked.
- What has changed
We can't read a sub-processor list or data processing agreement from Sourcegraph yet, so we can't record a change to either.
- Its window
We couldn't quote a notice window: we haven't found a data processing agreement from Sourcegraph anywhere we've looked.
- Window
- —
- Pages
- 4
- Copies
- 63
no window we can quote yet
pages we watch
dated copies of all its pages, since August 31, 2026
Sourcegraph DPA
We have not found a data processing agreement published by Sourcegraph anywhere we looked. There is no sub-processor notice window we can quote.
Sourcegraph sub-processors
We have not found a sub-processor list published by Sourcegraph anywhere we looked.
Every public change we have recorded · Where vendors publish their lists
How long Sourcegraph keeps your data
We hold no statement about data retention from Sourcegraph's watched pages. The pages we watch: changelog sourcegraph.com/changelog; pricing page sourcegraph.com/pricing; privacy policy sourcegraph.com/terms/privacy; terms of service sourcegraph.com/terms. On training with customer data, Sourcegraph's privacy policy (sourcegraph.com/terms/privacy, in the copy read October 11, 2026) says: “We process User Content to provide and improve the Services as described in our customer agreements.”
Retention windows vendors publish · What vendors say about training
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What Sourcegraph does not publish where we can read it
Of the 4 public pages we watch for Sourcegraph, these give us nothing right now.
Model or system card
the page we were watching has gone, and we have not found a replacement
sourcegraph.com/docs/modelsTrust and security
the page at that URL is not that document
sourcegraph.com/securitySub-processor list
we have not found one published anywhere we looked
Data processing agreement
we have not found one published anywhere we looked
Before you conclude anything
This only means we couldn’t read it on a public page. Sourcegraph may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Sourcegraph. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Sourcegraph? With an email at sourcegraph.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Sourcegraph in your product? Hear the morning we read a change.
You get the lines that moved, in Sourcegraph’s own words, and the date any window closes. No card. Nothing to cancel.