TL;DR

  • Confirm the legal entity and enterprise addendum with the current owner.
  • Treat retention, training use, and subprocessors as unconfirmed.

Scope

This page covers terms you should verify for Windsurf Enterprise. It is a snapshot checklist, not legal advice.

How to use this page

  1. Confirm you are on a Windsurf Enterprise agreement.
  2. Work through the checklist and capture the current policy date.
  3. Re-check monthly or after any ownership or policy update.
  4. Return to the Windsurf terms hub for plan comparisons.

What changed recently

See /posts/windsurf-acquisition-collapse-2025/ for the ownership timeline.

Terms deltas (auto)

Enterprise terms should be confirmed directly with the current owner and legal entity.

Verified deltas vs baseline

No verified deltas yet.

Potential deltas to verify

  • Data controller: Unconfirmed; verify controller and entity in enterprise addendum. (baseline: Unconfirmed; verify current legal controller in updated terms.)
  • Retention: Unconfirmed; verify retention window in enterprise terms. (baseline: Unconfirmed; verify retention window.)
  • Training use: Unconfirmed; verify training use or opt-out terms. (baseline: Unconfirmed; verify whether data is used for training.)
  • Model providers: Unconfirmed; verify model providers and data routing. (baseline: Unconfirmed; verify current model providers.)
  • Enterprise DPA: Unconfirmed; request DPA or addendum. (baseline: Unconfirmed; ask sales/support about DPA availability.)

Terms snapshot

FieldValueStatusSource
Data controllerUnconfirmed; verify controller and entity in enterprise addendum.unknown
RetentionUnconfirmed; verify retention window in enterprise terms.unknown
Training useUnconfirmed; verify training use or opt-out terms.unknown
SubprocessorsUnconfirmed; request current subprocessor list.unknown
Model providersUnconfirmed; verify model providers and data routing.unknown
Enterprise DPAUnconfirmed; request DPA or addendum.unknown

Terms snapshot checklist

  • Data controller: confirm the legal entity and controller.
  • Retention: confirm retention window.
  • Training use: confirm whether data is used for model training.
  • Subprocessors: request the current list.
  • Model providers: confirm which models receive data.
  • Enterprise DPA: confirm availability if required.

Evidence / signals

  • Current terms/privacy policy showing the controller or owner.
  • Signed enterprise addendum or DPA from the current owner.
  • Subprocessor list and data residency policy if provided.

How to verify

  • Read the latest terms and privacy policy for the current owner.
  • Request the enterprise addendum and subprocessor list.

If you already shared data

  • Re-evaluate approvals after any ownership change.
  • Request updated terms from the current controller.

What would invalidate this

A stable owner publishes updated terms with a recent effective date and a current subprocessor list.