Public evidence matrix
AI Coding Tools Public Trust Evidence Matrix 2026
Compare public Trust Center, Security, Privacy, Terms, DPA, Subprocessor, SOC 2 / ISO-related public language, AI data usage, code or repository handling, and enterprise-readiness evidence surfaces across selected AI coding tools and developer-workflow AI products.
This matrix compares observed public evidence surfaces. It does not rank vendor security, compliance quality, vendor risk, product quality, procurement pressure, or current buying intent.
Matrix boundary
How to read this table
Observed means the surface was represented in the reviewed public evidence fields. Not observed during review does not mean the surface is absent, unavailable to customers, or not provided privately under NDA.
Missing evidence should be read as not observed during review or unverified, not absent. Certification-related public language should be verified for entity scope, report type, report period, and current status before relying on it.
| Company / product | Role | Maturity pattern | Trust Center | Security page | Privacy policy | Terms / legal | DPA | Subprocessors | AI data usage / code handling | Enterprise controls |
|---|---|---|---|---|---|---|---|---|---|---|
| Claude Code / Anthropic | core ai coding tool | benchmark evidence mature | Observed | Observed | Observed | Observed | Observed | Observed | Observed | Observed |
| GitHub Copilot / GitHub | core ai coding tool | benchmark evidence mature | Not observed during review | Observed | Observed | Observed | Observed | Observed | Observed | Observed |
| Cursor / Anysphere | core ai coding tool | benchmark evidence mature | Observed | Observed | Observed | Observed | Observed | Observed | Observed | Observed |
| Windsurf / Devin Desktop / Cognition | core ai coding tool | benchmark evidence mature | Observed | Observed | Observed | Observed | Observed | Not observed during review | Not observed during review | Observed |
| JetBrains | core ai coding tool | benchmark evidence mature | Not observed during review | Observed | Observed | Observed | Observed | Observed | Not observed during review | Observed |
| Gemini Code Assist / Google Cloud | core ai coding tool | benchmark evidence mature | Not observed during review | Observed | Observed | Observed | Observed | Observed | Observed | Observed |
| Vercel v0 / Vercel | app builder or dev environment | partial public trust surface | Not observed during review | Observed | Observed | Observed | Not observed during review | Not observed during review | Observed | Not observed during review |
| Lovable | app builder or dev environment | benchmark evidence mature | Observed | Observed | Observed | Observed | Observed | Observed | Observed | Observed |
| Bolt / StackBlitz | app builder or dev environment | partial public trust surface | Observed | Observed | Observed | Observed | Not observed during review | Not observed during review | Not observed during review | Observed |
| Replit | app builder or dev environment | partial public trust surface | Not observed during review | Not observed during review | Observed | Observed | Not observed during review | Not observed during review | Not observed during review | Observed |
| Kiro / AWS | core ai coding tool | benchmark evidence mature | Not observed during review | Observed | Observed | Observed | Observed | Not observed during review | Not observed during review | Not observed during review |
| Amp / Sourcegraph | core ai coding tool | benchmark evidence mature | Not observed during review | Observed | Observed | Observed | Observed | Observed | Not observed during review | Observed |
| Zed | core ai coding tool | partial public trust surface | Not observed during review | Observed | Observed | Observed | Not observed during review | Not observed during review | Not observed during review | Observed |
| Cline | core ai coding tool | partial public trust surface | Not observed during review | Not observed during review | Observed | Observed | Not observed during review | Not observed during review | Observed | Not observed during review |
| opencode | core ai coding tool | sparse or gap pattern | Not observed during review | Not observed during review | Not observed during review | Not observed during review | Not observed during review | Not observed during review | Observed | Not observed during review |
| Kilo Code / Kilo | core ai coding tool | partial public trust surface | Not observed during review | Not observed during review | Observed | Not observed during review | Not observed during review | Not observed during review | Observed | Not observed during review |
| Codebuff | core ai coding tool | partial public trust surface | Not observed during review | Not observed during review | Observed | Observed | Not observed during review | Not observed during review | Observed | Not observed during review |
| Zencoder | core ai coding tool | partial public trust surface | Not observed during review | Not observed during review | Observed | Observed | Not observed during review | Not observed during review | Observed | Not observed during review |
| Qoder | core ai coding tool | partial public trust surface | Not observed during review | Not observed during review | Observed | Observed | Not observed during review | Not observed during review | Not observed during review | Not observed during review |
| Cosine | core ai coding tool | partial public trust surface | Not observed during review | Not observed during review | Observed | Observed | Not observed during review | Not observed during review | Observed | Not observed during review |
| Lightning AI | core ai coding tool | partial public trust surface | Not observed during review | Observed | Observed | Observed | Not observed during review | Not observed during review | Not observed during review | Observed |
| Testsigma | code quality testing adjacent | benchmark evidence mature | Not observed during review | Observed | Observed | Observed | Observed | Observed | Not observed during review | Observed |
| QA.tech | code quality testing adjacent | partial public trust surface | Not observed during review | Observed | Observed | Observed | Not observed during review | Not observed during review | Not observed during review | Not observed during review |
| TestSprite | code quality testing adjacent | partial public trust surface | Not observed during review | Observed | Observed | Observed | Not observed during review | Not observed during review | Not observed during review | Not observed during review |
| Trunk | code quality testing adjacent | partial public trust surface | Not observed during review | Observed | Observed | Observed | Not observed during review | Not observed during review | Not observed during review | Observed |
| CodeThreat | code quality testing adjacent | partial public trust surface | Not observed during review | Observed | Observed | Observed | Not observed during review | Not observed during review | Observed | Not observed during review |
| Signadot | code quality testing adjacent | partial public trust surface | Not observed during review | Observed | Observed | Observed | Not observed during review | Not observed during review | Not observed during review | Observed |
| CodeRabbit | core ai coding tool | partial public trust surface | Observed | Not observed during review | Observed | Observed | Observed | Not observed during review | Observed | Observed |
| Tabnine | core ai coding tool | partial public trust surface | Observed | Not observed during review | Observed | Observed | Not observed during review | Not observed during review | Observed | Observed |
| Augment Code | core ai coding tool | partial public trust surface | Observed | Observed | Not observed during review | Not observed during review | Not observed during review | Not observed during review | Observed | Observed |
| Qodo | core ai coding tool | partial public trust surface | Observed | Not observed during review | Not observed during review | Not observed during review | Not observed during review | Not observed during review | Observed | Observed |