Graded C+ on resilience. In Vannus's assessment it routes across several model providers — not captured by one — acceptable, with limits worth knowing.
These models are hosted by Amazon Web Services, Anthropic PBC, and Google Cloud Platform.
Vannus grades GitHub Copilot against nine dimensions of trust — data sovereignty, training privacy, compliance posture, operational resilience, exit portability, and more. The heaviest criterion asks whether the tool builds its own AI or resells someone else's model; where the vendor discloses it, the grade cites the vendor's own documentation. No paid placements — scoring is walled off from affiliate revenue. See the methodology →