01Trust Score

Windsurf

Week 2026-W20 · 15 May 2026 Vendor-Neutral
70 /100 Mostly Positive
3.4/5 (4137)
↓ PDF Report
WHY THIS SCORE

The overall trust score of (see deterministic score) reflects a vendor with strong security foundations but significant data privacy and operational transparency gaps. Compliance scored (see deterministic score) due to verified SOC2 Type II, HIPAA BAA availability, and FedRAMP High in progress. However, Legal/IP scored (see deterministic score), primarily due to the undisclosed AI training data policy and opaque data retention, which are critical enterprise area warranting further due diligences. Financial health scored (see deterministic score), indicating stability from recent funding but tempered by community reports of billing issues. Community trust scored (see deterministic score), reflecting positive product sentiment offset by widespread dissatisfaction with pricing changes and support. To improve this score, Windsurf must explicitly clarify its AI training data policy with an opt-out and resolve reported billing and support issues.

AUDITOR SUMMARY
Strength: Windsurf offers a highly capable AI-native IDE with robust security certifications (SOC 2 Type II, HIPAA, FedRAMP High in progress) and flexible deployment options, making it a strong contender for accelerating developer productivity in secure environments.
Trust Score 70/100 CONDITIONAL
Est. Annual Cost $58000 100 users / yr
Top Risk HIGH Reliability Overall: Medium
Priority Action AI Training Data Policy Not Explicitly Disclosed in ToS ↓ PDF  · TCO  · Hardening

Enterprise Verdict

! Conditional Approval
Risk: Medium 50 sources
Priority Action

AI Training Data Policy Not Explicitly Disclosed in ToS

This report updates every week. Weekly AI vendor intelligence — trust scores, contract red flags, competitive shifts.
02Top Risks

Risk Assessment

Seven-category enterprise risk analysis derived from community and vendor signals. Each card shows the evidence tier and the underlying finding.

High Reliability Community Data

Public documentation buyers may want to verify availability of specific uptime commitments or reliability history.

Medium Cost Predictability Community Data

Enterprises should negotiate fixed-rate contracts and monitor pricing changes for overage risks.

High Vendor Lock-in Community Data

Data export status unclear. Integration score: 0/100. Webhooks available, reducing lock-in risk.

Medium Support Quality Community Data

Insufficient public community reviews to verify support quality. Standard support channels (email/documentation) are assumed.

Medium Data Privacy Community Data

Compliance score: 86/100. GDPR status: unknown. Encryption at rest: yes.

Low Compliance Posture Community Data

SOC 2: type_ii. ISO 27001: none. Overall compliance score: 86/100.

Medium AI Transparency Verified

No training on user data detected. Code ownership terms unclear. Legal/ToS risk score: 65/100.

Verified — Confirmed by vendor documentation Community — Derived from community reports

Due Diligence Alerts

Priority reviews, recommended inquiries, and verified strengths — based on 95+ community data points

Recommended Inquiry Critical AI Training Data Policy Not Explicitly Disclosed in ToS
Recommended Inquiry High 94 Chromium CVEs Identified in Security Audits
Recommended Inquiry High Recurring Billing Disputes and Unresponsive Support
Recommended Inquiry High SLA Terms Not Publicly Disclosed — Request MSA Before Procurement
Recommended Inquiry High Tenant Isolation Model Not Publicly Documented
03Security & Compliance

Security & Compliance

SOC 2 ✓ Certified
ISO 27001 ✕ Not found
GDPR Not documented
HIPAA ✓ BAA

Data Security

Encryption (At Rest): AES-256
Encryption (In Transit): TLS

Security Features

SSO SAML 2.0
MFA Methods not specified in public documentation
Audit Logs 90 days
Vulnerability Disclosure

IT Hardening Guide

Deployment Checklist

Enterprise Contract Intelligence

DPA availability, data residency, and contract risk signals for procurement teams

📄 Data Processing Agreement Available
View DPA ↗

A Data Processing Addendum (DPA) is publicly available. It is essential to review this document to ensure it includes explicit clauses prohibiting the use of customer data for AI model training and specifies data retention periods, as these are critical gaps in the privacy policy.

🌐 Data Residency Customer-Controlled
Default: United States
United StatesEU (Frankfurt, Germany)United Kingdom

Windsurf offers data hosting in the United States and an EU cluster in Frankfurt, Germany, with AWS GovCloud for FedRAMP High customers. Standard Contractual Clauses (SCCs) are used for cross-border data transfers. Customers can control data residency through deployment options (Hybrid/Self-hosted).

⚠️ Contract Risk Medium Lock-in (65/100)
Unilateral change right: Yes ⚠ Data export on exit: No ⚠
⚠ 4 contract risk flags — click to review
⚠ Vendor reserves the right to use prompts and outputs for AI model training without explicit opt-out.
⚠ Lack of specific data retention periods in the privacy policy.
⚠ Undisclosed IP ownership for AI-generated code.
⚠ Absence of publicly disclosed SLA terms and liability caps.

The contract risk is elevated due to the vendor's right to use customer data for AI model training, opaque data retention, and unclear IP ownership. The absence of a public SLA and liability caps further increases enterprise exposure. Procurement teams must negotiate a comprehensive MSA and DPA to mitigate these risks.

New risk signals detected weekly. Weekly AI vendor intelligence — trust scores, contract red flags, competitive shifts.
04Community Signals

Community Evidence

Sentiment analysis and recurring issues from developer & enterprise community signals this week.

Recurring Issues

Billing disputes and refund delays 🟠 Community 3 mentions high → Stable

Enterprise Impact: Direct financial risk through incorrect billing and potential operational disruption due to unresolved account access. Damages trust and increases administrative overhead.

Implement robust billing system checks and improve customer support response times and resolution processes for financial inquiries. Provide clear communication channels for billing disputes.

Removal of free AI models and pricing model changes 🟠 Community 4 mentions high ↗ Worsening

Enterprise Impact: Increases cost unpredictability and forces unexpected budget reallocations. May lead to vendor lock-in for users reliant on previously free features, impacting adoption and retention.

Provide clearer communication on pricing changes and offer grandfathered pricing or transitional support for existing free-tier users. Ensure transparent quota consumption metrics.

Security concerns with Chromium CVEs 🟠 Community 1 mentions high → Stable

Enterprise Impact: Exposes the enterprise to potential security breaches and requires significant internal resources for vulnerability management and patching, increasing operational overhead.

Provide a public roadmap for addressing Chromium CVEs and offer clear guidance on mitigation strategies for enterprise users. Consider a more secure base for the IDE.

Sources: Web
MCP protocol security vulnerability 🟠 Community 1 mentions medium → Stable

Enterprise Impact: Could allow malicious actors to inject or modify tools during an AI agent session, leading to unauthorized actions or data exfiltration. Requires robust client-side validation.

Enhance the MCP client to detect and alert on unauthorized tool list modifications during a session. Implement cryptographic signing for tool manifests.

Sources: HN

Source Highlights This Week

Specific signals from GitHub, Hacker News, and Reddit — what the community is actually saying

👀

Analysis Pending

Community signals collected this week. Analysis and synthesis will be available in the next report update.

05Financial Impact

Financial Impact Panel

Cost intelligence and pricing signals for enterprise procurement decisions

Pricing data from public sources — enterprise rates differ. Verify with vendor.

TCO Calculator

Pricing Not Available

Enterprise pricing information could not be obtained for this vendor. This may be due to custom/private pricing models or limited publicly available data.

Don't evaluate blind next quarter. Weekly AI vendor intelligence — trust scores, contract red flags, competitive shifts.

Independent analysis — signals aggregated from GitHub, Reddit, HN, Stack Overflow, Twitter/X, G2 & Capterra. Not affiliated with any vendor. Corrections?

Download PDF Report

Create a free account to download the full enterprise audit PDF.

Sign up — it's free →

Already have an account? Log in