296 lines
10 KiB
Markdown
296 lines
10 KiB
Markdown
# GitHub Copilot - Enterprise Compatibility Evaluation
|
|
|
|
## Overview
|
|
GitHub Copilot is an AI-powered code completion tool developed by GitHub (Microsoft) that provides code suggestions and completions in real-time within IDEs.
|
|
|
|
## Enterprise/Commercial Use Permission
|
|
|
|
**Status: YES - Permitted with appropriate plans**
|
|
|
|
GitHub Copilot explicitly permits enterprise and commercial use through its Business and Enterprise plans. The service is designed for professional development teams and organizations.
|
|
|
|
**Key Points:**
|
|
- GitHub Copilot Business and Enterprise plans are specifically designed for organizational use
|
|
- Commercial use is permitted under the terms of service
|
|
- Organizations maintain control over their code and data with Business/Enterprise plans
|
|
|
|
**Sources to Verify:**
|
|
- https://github.com/features/copilot
|
|
- https://docs.github.com/en/copilot/overview-of-github-copilot/about-github-copilot-business
|
|
- https://github.com/customer-terms
|
|
|
|
---
|
|
|
|
## Data Training Policies
|
|
|
|
**Individual Plan (Free/Pro):**
|
|
- For Copilot Pro: Code is NOT used to train AI models by default (setting cannot be enabled)
|
|
- GitHub, its affiliates, and third parties do not use your data (prompts, suggestions, code snippets) for AI model training
|
|
- Free tier users may have data used for model improvement - use caution with sensitive code
|
|
|
|
**Business Plan:**
|
|
- Code snippets are NOT used for training models (GitHub or third-party like Anthropic, Google)
|
|
- Prompts and suggestions are not retained
|
|
- No data is shared with other users or organizations
|
|
- User Engagement Data kept for two years only
|
|
- Feedback Data stored as needed for its purpose
|
|
|
|
**Enterprise Plan:**
|
|
- Same protections as Business plan
|
|
- Code snippets NOT used for training
|
|
- Enhanced privacy controls and audit capabilities
|
|
- Content exclusions can be configured at repository/organization level
|
|
|
|
**Key Policy Statement:**
|
|
GitHub explicitly states that for Business and Enterprise customers, their code is never used to train models and prompts/completions are not retained beyond the session. This applies to both GitHub's models and third-party models (Anthropic, Google).
|
|
|
|
**Sources to Verify:**
|
|
- https://docs.github.com/en/copilot/overview-of-github-copilot/about-github-copilot-business#data-privacy
|
|
- https://github.com/features/copilot#privacy
|
|
|
|
---
|
|
|
|
## Data Retention and Sharing Policies
|
|
|
|
**Data Retention:**
|
|
- **Individual Plan**: Prompts and completions may be retained for service improvement
|
|
- **Business/Enterprise Plans**:
|
|
- Prompts are only processed in real-time
|
|
- Suggestions are not retained after delivery
|
|
- No long-term storage of code snippets
|
|
- Telemetry data is retained for service operation and improvement
|
|
|
|
**Data Sharing:**
|
|
- Code from Business/Enterprise customers is NOT shared with:
|
|
- Other GitHub users
|
|
- Third-party AI model providers
|
|
- Public datasets or repositories
|
|
- Microsoft/GitHub maintains data within their infrastructure
|
|
- No cross-organization data sharing
|
|
|
|
**Data Location:**
|
|
- Processed within Microsoft Azure infrastructure
|
|
- Enterprise customers may have options for data residency requirements
|
|
- Complies with major data protection regulations (GDPR, CCPA, etc.)
|
|
|
|
**Sources to Verify:**
|
|
- https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement
|
|
- https://docs.github.com/en/copilot/github-copilot-enterprise/overview/privacy-and-security-for-github-copilot-enterprise
|
|
|
|
---
|
|
|
|
## IP and Confidentiality Concerns
|
|
|
|
**Intellectual Property:**
|
|
- **Code Ownership**: Users retain full ownership of their code
|
|
- **Generated Code**: Users own the code generated by Copilot
|
|
- **License Filtering**: Copilot includes a duplication detection feature to flag code that matches public repositories
|
|
- **Attribution**: No automatic attribution for AI-generated code
|
|
|
|
**Confidentiality Protections:**
|
|
- Business/Enterprise plans include confidentiality guarantees
|
|
- Code is not exposed to other users or used in other contexts
|
|
- Microsoft provides enterprise-grade security and compliance certifications
|
|
|
|
**Known Concerns:**
|
|
- **Copyright Issues**: Some concerns exist about training data including copyrighted code from public repositories
|
|
- **Code Similarity**: Generated code may occasionally resemble existing open-source code
|
|
- **License Compliance**: Organizations should review suggested code for license compatibility
|
|
- **Mitigation**: Use Business/Enterprise plans with duplication detection enabled
|
|
|
|
**Compliance Certifications:**
|
|
- SOC 2 Type II
|
|
- ISO 27001
|
|
- GDPR compliant
|
|
- HIPAA eligible (for Enterprise)
|
|
|
|
**Sources to Verify:**
|
|
- https://docs.github.com/en/copilot/overview-of-github-copilot/about-github-copilot-business#intellectual-property
|
|
- https://resources.github.com/security/github-copilot-trust-center/
|
|
|
|
---
|
|
|
|
## Free Tier Details
|
|
|
|
**GitHub Copilot Free (Individual)**
|
|
|
|
**Availability:**
|
|
- Available to verified students
|
|
- Available to maintainers of popular open-source projects
|
|
- Limited free trial for new users (typically 30 days)
|
|
- New free tier for individual developers (2026)
|
|
|
|
**Features Included:**
|
|
- Code completions in supported IDEs (2,000 completions/month on free tier)
|
|
- Multi-line code suggestions
|
|
- Code explanations
|
|
- Support for multiple programming languages
|
|
- IDE integrations (VS Code, Visual Studio, JetBrains, Neovim, etc.)
|
|
- 50 premium requests per month (free tier)
|
|
|
|
**Limits:**
|
|
- 2,000 code completions per month (free tier)
|
|
- 50 premium requests per month (free tier)
|
|
- Data may be used for model improvement (with opt-out available)
|
|
- Limited to individual use only
|
|
|
|
**Duration:**
|
|
- Student access: Duration of verified student status
|
|
- Open-source maintainers: Ongoing while maintaining qualifying projects
|
|
- Trial: Typically 30 days
|
|
|
|
**Sources to Verify:**
|
|
- https://github.com/education/students
|
|
- https://docs.github.com/en/copilot/overview-of-github-copilot/about-github-copilot-free
|
|
|
|
---
|
|
|
|
## Paid Plans
|
|
|
|
### GitHub Copilot Individual/Pro
|
|
**Price:** $10/month or $100/year (per user)
|
|
|
|
**Features:**
|
|
- Code completions and suggestions
|
|
- Multi-line and full function suggestions
|
|
- Code explanations
|
|
- All IDE integrations
|
|
- Support for 30+ programming languages
|
|
- Chat interface for code questions
|
|
|
|
**Best For:** Individual developers and freelancers
|
|
|
|
---
|
|
|
|
### GitHub Copilot Business
|
|
**Price:** $19 USD/month per user
|
|
|
|
**Features:**
|
|
- All Individual features
|
|
- **No code training**: Your code is never used to train models
|
|
- **No data retention**: Prompts and completions not stored
|
|
- Organization-level policy management
|
|
- License management and audit logs
|
|
- Code referencing and duplication detection
|
|
- Enterprise-grade security and compliance
|
|
- Copilot Chat included
|
|
- Priority support
|
|
- Additional premium requests available at $0.04 each
|
|
|
|
**Best For:** Development teams and organizations
|
|
|
|
---
|
|
|
|
### GitHub Copilot Enterprise
|
|
**Price:** $39 USD/month per user (requires GitHub Enterprise Cloud)
|
|
|
|
**Features:**
|
|
- All Business features
|
|
- **1,000 premium requests included** (higher allowance than Business)
|
|
- **Fine-tuned suggestions** based on organization's codebase
|
|
- **Chat interface** within GitHub.com
|
|
- GitHub.com Chat integration
|
|
- Knowledge bases
|
|
- Custom models trained on your codebase
|
|
- Documentation search and chat
|
|
- Pull request summaries
|
|
- Code review assistance
|
|
- Integration with organization's knowledge base
|
|
- Advanced admin controls and analytics
|
|
- Dedicated support options
|
|
- Early access to new features and models
|
|
|
|
**Best For:** Large enterprises requiring customization and advanced integration
|
|
|
|
---
|
|
|
|
## Usage Limits
|
|
|
|
### Rate Limits:
|
|
**Individual/Pro:**
|
|
- Standard rate limits on completions (specifics not publicly disclosed)
|
|
- Reasonable use policy applies
|
|
|
|
**Business/Enterprise:**
|
|
- Higher rate limits than Individual plan
|
|
- Enterprise tier typically has highest limits or custom limits available
|
|
- Limits are per-user, not per-organization
|
|
|
|
### Request Limits:
|
|
- No published hard limit on number of completion requests
|
|
- Throttling may occur under excessive use
|
|
- Real-time completions operate on a "reasonable use" basis
|
|
|
|
### User Limits:
|
|
- **Individual**: Single user only
|
|
- **Business**: Minimum typically 2-5 users, scales to thousands
|
|
- **Enterprise**: Scales to unlimited users within organization
|
|
|
|
### Project/Repository Limits:
|
|
- No specific limits on number of projects or repositories
|
|
- Works across all repositories user has access to
|
|
- Enterprise can be scoped to specific repositories if desired
|
|
|
|
### IDE Support:
|
|
- Visual Studio Code
|
|
- Visual Studio
|
|
- JetBrains IDEs (IntelliJ, PyCharm, WebStorm, etc.)
|
|
- Neovim
|
|
- Azure Data Studio
|
|
- No limit on number of IDE installations per license
|
|
|
|
### Language Support:
|
|
- 30+ programming languages supported
|
|
- No limits on which languages can be used
|
|
|
|
---
|
|
|
|
## Summary Recommendation
|
|
|
|
### Best for Enterprise Use:
|
|
**GitHub Copilot Business or Enterprise** plans are recommended for organizations:
|
|
|
|
**Strengths:**
|
|
- Clear data protection policies (no training on customer code)
|
|
- No data retention of prompts/completions
|
|
- Strong IP protections and ownership clarity
|
|
- Enterprise-grade security and compliance
|
|
- Transparent pricing and licensing
|
|
|
|
**Considerations:**
|
|
- Cost scales with team size
|
|
- Enterprise features require highest tier
|
|
- Some copyright concerns exist around training data (though mitigated for Business/Enterprise customers)
|
|
|
|
**Ideal For:**
|
|
- Software development teams of any size
|
|
- Organizations with strict IP protection requirements
|
|
- Companies requiring compliance certifications
|
|
- Teams using GitHub ecosystem
|
|
|
|
---
|
|
|
|
## Verification Checklist
|
|
|
|
Before implementing, verify the following current information:
|
|
|
|
- [ ] Current pricing and plan details at https://github.com/pricing
|
|
- [ ] Latest privacy policy at https://docs.github.com/en/site-policy/privacy-policies
|
|
- [ ] Data usage policies for your chosen plan
|
|
- [ ] Compliance certifications relevant to your industry
|
|
- [ ] Terms of service and acceptable use policies
|
|
- [ ] Available enterprise features and customization options
|
|
- [ ] Support SLA for your plan tier
|
|
|
|
---
|
|
|
|
**Last Updated:** February 2, 2026
|
|
|
|
**Additional Sources:**
|
|
- [Demystifying GitHub Copilot Security Controls](https://techcommunity.microsoft.com/blog/azuredevcommunityblog/demystifying-github-copilot-security-controls-easing-concerns-for-organizational/4468193)
|
|
- [GitHub Copilot Data Pipeline Security](https://resources.github.com/learn/pathways/copilot/essentials/how-github-copilot-handles-data/)
|
|
- [GitHub Copilot Plans & Pricing](https://github.com/features/copilot/plans)
|
|
- [GitHub Copilot Pricing 2026 Guide](https://userjot.com/blog/github-copilot-pricing-guide-2025)
|
|
|
|
**Note:** Policies and pricing may change. Always verify current terms at official GitHub documentation before making procurement decisions.
|