AI TrustMark

Coding assistants companies, products & suppliers

Coding assistants are AI tools that suggest, explain or generate software inside an editor or repository workflow. They use code and comments as context and are bought as developer productivity products, not as general chatbots. Buyers should treat them as systems that may send source code to a model host.

What are Coding assistants?

Coding assistants are AI tools that suggest, explain or generate software inside an editor or repository workflow. They use code and comments as context and are bought as developer productivity products, not as general chatbots. Buyers should treat them as systems that may send source code to a model host.

What problems does it solve?

Review queues grow while teams still lack a policy for where source code and secrets are sent.

Typical business use cases

  • Inline completion
  • Test generation
  • Pull-request review comments
  • Legacy code explanation

Important capabilities

  • Repository context
  • IDE plugins
  • Policy filters
  • Self-hosted model options

What buyers should evaluate

  • Training-use of customer code
  • Secret scanning
  • On-prem or VPC options
  • Licence of suggested snippets

Risks and governance considerations

Unreviewed generated code, leaked secrets, and unclear IP in suggestions.

Procurement checklist

  • Data-use addendum
  • Retention
  • Admin disablement
  • Audit of sent context

Relevant AI Trustmark assurance

AI Trustmark does not treat editor telemetry or vendor benchmarks as independent evidence of secure handling.

Methodology · How verification works

Products and providers

Open a product profile for its catalogue details, or use the provider link for the company profile. Claimed listings appear first, then by name. Payment never changes the order.

  • Amazon Q Developer

    By Amazon Web Services

    Amazon Q Developer is an AI coding assistant from AWS that writes, debugs and refactors code natively in the IDE and command line. It also answers questions about AWS services and

  • Claude Code

    By Anthropic

    Anthropic markets Claude Code as a terminal-native coding agent alongside Claude chat/API, with computer-use capabilities in the Claude product family. Public marketing also emphas

  • Augment Code

    By Augment Code

    Your engineers have agents. Your organization doesn't. Cosmos is the platform that closes the gap. Augment Code is Augment Code's software product, from Augment Computing, Inc

  • Devin

    By Cognition

    Devin is Cognition's autonomous software engineering agent. It runs in the cloud or on a developer's machine, maps codebases and architecture into an auto-updating wiki, plans work

  • Windsurf Editor

    By Cognition

    Cognition operates Devin, the first autonomous software engineer. Devin plans, writes, tests, and ships production code inside your existing workflows. Windsurf Editor is Cognition

  • Cursor

    By Cursor

    Cursor is Anysphere's AI code editor. The vendor describes it as an editor that generates and edits code in the local project, with agent-style tool use, offered as a SaaS subscrip

  • Factory Droids

    By Factory

    Factory markets agent-native software development where AI coding agents (Droids) automate coding, testing, and deployment for startups and enterprises. Public marketing also empha

  • GitHub Copilot

    By GitHub

    GitHub Copilot is GitHub's AI coding assistant for suggesting and chatting about code inside GitHub and supported editors. GitHub markets individual, Business and Enterprise plans

  • Gemini Code Assist

    By Google

    Gemini Code Assist Standard and Enterprise are Google's AI coding assistants for teams and businesses, built on Gemini 3 with a 1 million token context window. They offer code comp

  • JetBrains AI Assistant

    By JetBrains

    JetBrains AI Assistant adds AI chat, code completion, and agent features inside JetBrains IDEs. Public marketing also emphasises native integration across IntelliJ-family IDEs. It

  • Qodo Gen

    By Qodo

    Qodo is an agentic code review and integrity platform for improving code quality at every stage. Qodo Gen is Qodo's software product, from Codium Ltd. Published at qodo.ai/products

  • Cody

    By Sourcegraph

    Give humans and agents complete context to understand, oversee, and evolve the world. Cody is Sourcegraph's software product, from Sourcegraph, Inc. Published at sourcegraph.com/co

  • Supermaven

    By Supermaven

    Supermaven markets a fast AI code-completion copilot with a very large context window for higher-quality completions. Public marketing also emphasises emphasises completion speed.

  • Sweep

    By Sweep

    Sweep markets an autonomous coding agent that turns tickets and issues into code changes and bug fixes. Public marketing also emphasises ticket-to-PR style autonomous fixes. It is

  • Tabnine

    By Tabnine

    Tabnine is the AI code assistant that accelerates and simplifies software development while keeping your code private, secure, and compliant. Tabnine is Tabnine's software product,

Products

Claimed products appear first. Ranking packs and payment do not change this list.

Also used in this category

These products have a different primary category so they do not compete for the same ranking queries. They are listed here because buyers still encounter them in this job.

Related categories

Relevant procurement and assurance guides

Frequently asked questions

Is a coding assistant a general chatbot?

No. It is scoped to software work and usually has repository or IDE context.

Does listing here mean the tool is assessed?

No. Category membership is descriptive. Assessment is a separate Trustmark product.

What are Coding assistants?

Coding assistants are AI tools that suggest, explain or generate software inside an editor or repository workflow. They use code and comments as context and are bought as developer productivity products, not as general chatbots. Buyers should treat them as systems that may send source code to a model host.

Should coding assistants be allowed to send private source code to third-party models?

That is a buyer policy decision. Procurement should require the default data-use terms, retention, whether snippets leave the organisation, and whether secrets are redacted. A listing under coding assistants does not mean code stays on-premises.

How should prompt injection and tool-output attacks be controlled?

Agents that read untrusted content or tool output can be instructed to exfiltrate data or take writes. Buyers should ask what is treated as untrusted, whether tool output can change the plan, and what tests were run. Scanner marketing is not the same as independent testing.

How can buyers tell whether customer data is used to train models?

Ask whether prompts, files, logs or outputs are used to train, fine-tune or evaluate models, including by subprocessors. Require the contractual default, any opt-out, and whether the setting can be changed silently. Treat marketing 'we do not train' claims as unverified until evidenced.

Why do buyers need to know which model providers sit behind an AI product?

Most products depend on named models or APIs. Buyers should identify those providers, where data is sent, and who is accountable when a model version changes. A supplier that cannot name material model providers is not ready for high-assurance procurement.

What should buyers ask about AI data retention and deletion?

Establish how long prompts, files, traces and embeddings are kept, who can access them, and how deletion is evidenced. Retention in a debug or eval store can outlast the customer contract if it is not in scope.