Can our developers use Cursor or GitHub Copilot?
AI code tools are productive but they ship your code to a third party. The question is what flows in which mode.
Try this first
- 1Pick the business tier: GitHub Copilot Business and Cursor Business both promise code is not used for training. Free/personal differs.
- 2Repos with customer credentials, keys, or medical data deserve extra care. Disable AI completion there or use exclude patterns.
- 3AI suggestions are suggestions. Code review is not optional; the hallucination sits in an import that does not exist or a security flaw.
- 4Track license attribution. AI can suggest license-unaware snippets, an SBOM and normal dependency review catches it.
- 5Assign ownership: one developer who periodically checks team settings and the current tier choice.
When to bring us in
On audits, certification (ISO 27001, SOC 2), or customer questions about AI-in-code: we help with policy text and tool configuration.
See also
- Can I paste a customer file or email into ChatGPT?Depends on the account and settings. Free ChatGPT and a Team tenant behave very differently from what most people assume.
- I want a one-page AI policy for my teamA real one-pager beats a thick document nobody reads. Four headers and concrete examples.
- How do I tell if an AI answer is made up?Models sound confident even when they are wrong. A few habits catch most mistakes.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.