Codeium is SOC 2 Type 2 Compliant
Blog post from Windsurf
The company has achieved a SOC 2 Type II certification, affirming through a third-party audit that it upholds rigorous security and privacy standards over an extended period, including vulnerability scans and penetration tests. This certification is significant as SOC 2 audits are an unbiased way to verify adherence to standards relating to security, availability, confidentiality, processing integrity, and privacy, particularly concerning customer data protection. The audit ensures robust defenses against unauthorized access, service availability, restricted internal information access, and personal information protection. Despite other tools like GitHub Copilot and Amazon CodeWhisperer lacking third-party compliance audits, the company is committed to pursuing even stronger compliance measures to maintain its standing as a secure and compliant generative AI platform for software developers.