GitHub Copilot

GitHub/Microsoft

Vendor

Coding assistant platform delivered through IDE plugins with individual, business, and enterprise tiers.

Curated by Tiberiu ArvaStale

Proprietary

Strengths

  • Broad IDE adoption
  • Free tier for light usage
  • Enterprise controls available

Practitioner note

Safe default for enterprises standardising AI coding help broadly, especially when GitHub, VS Code, and policy controls already sit in the delivery path.

Where it sits in the stack

Listed under Assistants & copilots in the Use layer.

  1. Build & orchestrate
  2. Control plane
  3. Use

Governance posture

Reviewed 2026-05-26
PartialData residency

EU data residency on GitHub Enterprise Cloud (US/EU only, surcharge); Business/Individual default US.

Source
YesDeployment model

SaaS via IDE plugins; no self-hosted/on-prem option. (saas)

Source
YesAudit logging

Enterprise audit logs cover seat/access/policy and Copilot interactions; audit-log API.

Source
YesSOC 2

GitHub SOC 2 Type II; Copilot in scope.

Source
YesISO 27001

GitHub ISO/IEC 27001:2022; Copilot in scope.

Source
YesISO 42001

GitHub Copilot listed in Microsoft ISO/IEC 42001:2023 scope.

Source
UnknownEU AI Act

Assessed limited-risk by product category; no published vendor EU AI Act conformity assessment. (role: limited-risk)

YesLicense risk

Proprietary SaaS; GitHub/Microsoft ecosystem lock-in. (medium)

Source

EU AI Act obligations

Risk tier: Limited risk · as of 2026-10-10

Source-backed information mapped from GitHub Copilot's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.

Article 4AI literacy

Providers and deployers must take measures to ensure a sufficient level of AI literacy in staff and other persons operating AI systems on their behalf.

Applies from

Official text
Article 50Transparency for certain AI systems

People must be informed when they interact with an AI system; synthetic audio, image, video, and text content must be marked as artificially generated, and deepfakes disclosed.

Applies from

Official text

Change history

Source-backed and auto-detected events for this tool, newest first.

  1. Model addition

    Claude Haiku 5.5 is generally available in GitHub Copilot for Pro, Pro+, Max, Business and Enterprise.

    Claude Haiku 5.5 in GitHub Copilot
  2. Feature

    Local sandboxing is generally available in Copilot CLI, the Copilot app and VS Code Agent Host sessions at no extra cost, with enterprise policies developers cannot weaken.

    Local sandboxing for GitHub Copilot now generally available
  3. Deprecation

    GitHub deprecated Gemini 3.5 Flash, Gemini 3.6 Flash, Kimi K2.7 Code and Claude Opus 4.7 across Copilot; suggested replacements are Gemini 3.8 Flash, Kimi K3 and Claude Opus 5.5.

    Selected models in GitHub Copilot deprecated
  4. Model addition

    Claude Opus 5.5 became selectable in GitHub Copilot for Pro+, Max, Business, and Enterprise plans across IDEs, GitHub.com, Copilot CLI, and the coding agent.

    Claude Opus 5.5 is now available in GitHub Copilot · GitHub Changelog
  5. FeatureHigh impact

    GitHub Copilot added Jira-to-implementation context in the Copilot app, experimental adaptive model routing in Copilot CLI, recurring agent automations in VS Code, and centrally managed JetBrains sandbox policies.

    GitHub Copilot weekly releases — September 7
  6. FeatureHigh impact
    GitHub Copilot expands model-training use of interaction data

    GitHub announced that, from April 24, interaction data from Copilot Free, Pro, and Pro+ users will be used for model improvement unless users opt out, making data-governance review more important for enterprises.

    Updates to GitHub Copilot interaction data usage policy

See GitHub Copilot read column-by-column against the tools enterprise teams most often evaluate it against.

Explore the category

Compare this tool against the rest of its category and the cloud platform foundation layer.