Devin AI – AI Trust & Transparency Profile

Devin is an autonomous AI software engineer that can understand codebases, plan and implement software tasks, run tests, debug issues, create pull requests, and collaborate with development teams.

Pricing: 20 Design & Development

Disclosure

Transparency Score

36%

5/14 points, 2 reviewed

0 approved N/A excluded · Published information only

Measures disclosure completeness across applicable fields. Not applicable items are excluded. This score is not a certification of quality, security, or regulatory compliance.

About this information

Information in this section may be inaccurate, incomplete or out of date. Errors can arise from automated website extraction, vendor submissions or human review. AISetApp does not guarantee its accuracy or completeness. “Reviewed” means a published statement was checked against the cited evidence; it does not confirm the underlying practice, certify compliance or endorse the vendor.

Check the original sources and confirm important information directly with the vendor before relying on it. Found an error? Request a correction

Legal entity & jurisdiction

No disclosure recorded

DPA availability

Published statement reviewed

Available publicly

Source, evidence & review details
Source:
https://devin.ai/windsurf/dpa
Supporting evidence:
This Data Processing Addendum (“DPA”) governs Cognition AI, Inc. (“Licensor”)’s processing of Customer Personal Data
Last edited:
Statement reviewer:
Admin
Last reviewed:

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Article 50 disclosure notice

No disclosure recorded

Data residency

Self-declared

Multiple regions

Source, evidence & review details
Source:
https://devin.ai/security
Supporting evidence:
Multiple deployment options and custom deployment regions
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Customer data used for training

No disclosure recorded

Retention period

No disclosure recorded

Subprocessor list published

Published statement reviewed

Yes

Source, evidence & review details
Source:
https://devin.ai/windsurf/dpa
Supporting evidence:
A list of Licensor’s current Subprocessors is set forth in Appendix C to this DPA
Last edited:
Statement reviewer:
Admin
Last reviewed:

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Breach notification timeframe

No disclosure recorded

Base models used

Self-declared

Mixed models

Source, evidence & review details
Source:
https://devin.ai/security
Supporting evidence:
Devin Security is model-neutral: it draws on models from every major lab and our own, and routes intelligently to optimize cost-performance
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Human oversight capability

Self-declared

Review available

Source, evidence & review details
Source:
https://devin.ai/security
Supporting evidence:
Each finding comes back confirmed, false positive, or flagged for human review, with logs and screenshots attached
Last edited:
Statement reviewer:
No current review
Last reviewed:
Not recorded

Review scope: checking a published statement against its source. No confirmation of the underlying practice.

Annex III high-risk declaration

No disclosure recorded

ISO/IEC 27001

No disclosure recorded

ISO/IEC 42001

No disclosure recorded

SOC 2

No disclosure recorded

Correction requests will open here soon. Until then, please contact us. Contact us