GitHub / Microsoft · Code Assistant
GitHub Copilot
Allow Enterprise Enterprise tier: Available DPA: Yes
Network signatures
Domains: copilot.github.com, github.com
API endpoints: api.githubcopilot.com, default.githubcopilot.com, proxy.githubcopilot.com
SNI patterns: *.githubcopilot.com
Client signatures
Process names: copilot-language-server, GitHub Copilot.app (macOS)
Browser extensions: GitHub Copilot for VS Code (risk: low)
Risk profile (1–5)
- Data exfiltration: 4
- IP loss: 4
- Output quality (hallucination / legal): 3
- Integration risk (OAuth, extensions, agentic): 3
Data egress concerns
- Source code
- API keys/secrets in code
- Code comments containing customer or internal context
Training-use default
Business and Enterprise tiers contractually exclude customer code from training. Free tier (Copilot Free) and Individual tier defaults differ — review current GitHub terms.