Tabnine
Tabnine
Safe
Tabnine's privacy docs say it has a no-train, no-retain policy for your code, including when other models are selected, and that code context is deleted after the suggestion is returned. Self-hosted and air-gapped options keep code off Tabnine's servers. Certifications and a business associate agreement are not listed on the privacy page we read, so do not assume HIPAA coverage.
Last checked 2026-11-10
Data-safety checklist
Trains on your data by default
No
Tabnine says it never retains or shares your code, does not train its completion or protected chat models on your code, and does not train on code used for personalization. Those models are described as trained on permissively licensed open source, or on the customer's own private fine-tune.How to opt out
Steps
No opt-out is required. The no-train rule is the stated policy for the product.Data retention
What they keep
Code context is deleted immediately after the response. Tabnine says it does not retain user code beyond inference. Operational metrics and logs are kept for a week and are described as not including code. Client telemetry includes hashed identifiers and usage counts, not source code.BAA / HIPAA
Unknown
The privacy document does not mention HIPAA or a business associate agreement.Certifications
1 listed
- Unknown
Enterprise and admin controls
Controls
Enterprise can run in a VPC or air-gapped. In an air-gapped install, metrics can stay on the customer's Prometheus and log stack. Private fine-tunes are described as reachable only by the customer's team.Sources
1 pages