ModelCharter

Is Tabnine safe for work?

Low risk · 0

Tabnine · Coding · facts (medium-confidence)

Tabnine is low-risk for default at-work use (0/100): it does not train on your data, and holds SOC 2 Type II.

Watch out: Tabnine says it never trains on your code, keeps zero code retention, holds SOC 2 and ISO 27001, and can run on-prem or air-gapped. The open questions are a signed BAA and a formal DPA, both unverified on its own pages, so confirm before regulated use.

Data and compliance facts

Trains on consumer-tier data
No
Trains on business-tier data
No
Training opt-out available
Unverified
SOC 2 Type II
Yes
ISO 27001
Yes
ISO 42001 (AI management)
Unverified
GDPR Data Processing Addendum
Unverified
HIPAA BAA
Unverified
EU data residency
Unverified
SSO / SAML
Yes
Data retention
Zero code retention: code is processed ephemerally and immediately discarded; operational metrics kept about one week.
Safer tier
Enterprise (self-hosted, VPC or air-gapped): private models, SSO and full data-residency control

Why it scores 0 out of 100

No risk factors flagged. Strong default data handling.