Codegen

Codegen publicly advertises 1 compliance framework through a trust center hosted by Vanta.

Developer Tools & Infrastructure

1

Advertised frameworks

Vanta

Trust center platform

First observed

Founding to trust center

AI coding tool reviews, head-to-head comparisons, alternatives guides, and developer workflow insights from the team behind the Codegen agent platform.

Summary from the company’s website.

Publicly advertised compliance posture

As observed on September 8, 2026 on the organization’s public trust center.

  • SOC 2

    Independent CPA audit of controls for security, availability, and confidentiality.

Compliance timeline

  1. September 8, 2026

    Posture last observed by Trust Index

Subprocessors

Third parties Codegen discloses on its trust center. Linked entries have their own profile in the Trust Index.

60% chain trust: 15 of 25 disclosed subprocessors are themselves in the Trust Index.

  • Google Analytics Web Traffic Analytics
  • Anthropic AI Model Integration
  • Sourcegraph Code Search and Navigation
  • Pycharm IDE for Python Development
  • Okta Identity and Access Management
  • OpenAI AI Model Integration and Language Processing
  • 1Password Password/Secrets Management
  • Cursor AI-Powered Development Environment
  • Datadog Application Performance Montioring
  • Firehydrant Incident Management
  • GitHub Source Code Management
  • Kandji Device Management
  • Google Workspace Productivity and Email Hosting
  • Slack Internal Communication
  • Notion Team Collaboration and Project Management
  • Grafana Observability and Visualization Platform
  • Linear Issue Tracking and Project Management
  • Modal Serverless Infrastructure
  • Retool Internal Tool Development
  • Sentry Application Error Tracking
  • Supabase Backend Database and Authentication
  • Terraform Infrastructure as Code
  • Vercel Web App Hosting
  • Metabase Business Intelligence and Analytics
  • Posthog Product Analytics and Event Tracking

About this data

The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.

More in Developer Tools & Infrastructure

How can we work together

Schedule a discovery session

A complimentary, exploratory meeting to discuss your business goals and challenges, identify potential solutions, and determine if our services align with your needs.

Hire us for a project

Augmenting a specific initiative or project, leveraging our expertise and resources to deliver a defined outcome.

Retain us long term

Ongoing collaboration and support through regular meetings, check-ins, and access to our team's collective knowledge and experience, empowering you to make informed decisions and drive sustained growth.