Replit · Code Assistant
Replit AI (Ghostwriter / Agent)
Allow Enterprise Enterprise tier: Available DPA: Yes
Network signatures
Domains: replit.com, replit.dev
API endpoints: api.replit.com, eval.replit.com
SNI patterns: *.replit.com, *.replit.dev, *.replit.app
Client signatures
Process names: replit (browser-based IDE)
Mobile apps: Replit iOS; Replit Android
Risk profile (1–5)
- Data exfiltration: 5
- IP loss: 5
- Output quality (hallucination / legal): 3
- Integration risk (OAuth, extensions, agentic): 4
Data egress concerns
- Source code hosted and executed on Replit servers is accessible to the AI assistant
- Environment variables and secrets stored in Replit may be exposed to AI completions
- Entire project repositories uploaded to cloud-hosted IDE leave the corporate network
- AI-generated code deployed directly from Replit may bypass code review and security scanning
Training-use default
Replit has stated that Enterprise plan code is excluded from AI training. Free-tier code visibility and training use should be reviewed in current terms. Replit's AI features leverage third-party models whose training policies also apply.