Qodo

AI code review and testing tool with agentic workflows for quality assurance

by Qodo

Israel🌐Cloud (US) or self-hosted / on-premise

TrustKit ScoreRated across 5 compliance dimensions: data residency, legal jurisdiction, data retention, certifications, and regulatory fit.Strong

About Qodo

Qodo (rebranded from CodiumAI in 2024) is an Israeli AI code quality platform founded in 2022 that helps development teams write better code through AI-powered testing, code review, and quality analysis. The platform generates meaningful test cases, reviews pull requests for bugs and security vulnerabilities, and provides improvement suggestions directly in developer workflows. Qodo offers two main products: Qodo Gen (IDE extension for VS Code and JetBrains) that generates test suites and analyses code quality as developers write, and Qodo Merge (GitHub/GitLab/Bitbucket integration) that automatically reviews pull requests with detailed feedback on code changes, test coverage, and potential issues. The platform uses AI models specifically fine-tuned for code understanding and test generation, producing tests that are contextually relevant and cover edge cases that developers often miss. Qodo supports multiple programming languages including Python, JavaScript, TypeScript, Java, and more. Qodo is headquartered in Tel Aviv with a growing presence in the US market. The platform offers a free tier for individual developers and paid plans for teams with advanced features, priority support, and self-hosted deployment options for enterprise customers concerned about code privacy.

TrustKit Score Breakdown

?68% Strong

Data Residency

Where is your data stored and processed?

Self-hosted and on-premise deployment options available. Cloud version on US infrastructure. Enterprise customers can keep code entirely on their own infrastructure.

4/5

Legal Jurisdiction

Which laws govern the company and your data?

Israeli company with adequate GDPR data transfer status. On-premise deployment mitigates jurisdiction concerns. Not subject to US CLOUD Act as primary entity.

3/5

Data Retention & Training

Is your data used for model training?

Code not used for training. Self-hosted option means code never leaves customer infrastructure. Clear data handling policies.

4/5

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

SOC 2 Type II certified. GDPR compliant. Strong security posture for a development tool. No ISO 27001.

3/5

Regulatory Fit

Suitability for regulated industries and professional services

Self-hosted deployment suitable for regulated industries. SOC 2 certified. Good fit for financial services and enterprises with strict code security requirements.

3/5

Pricing

FreemiumFree tier14-day trial

FreeFreeIDE extension (VS Code, JetBrains) · Basic test generation · Limited AI interactions

Teams$19/user/mo($15/user/mo annual)Unlimited AI interactions · PR review automation · Team analytics · …

EnterpriseContact SalesSelf-hosted deployment · SSO · Custom integrations · …

Full pricing details →

Quick Facts

Starting PriceFree / from $19/user/moData HostingCloud (US) or self-hosted / on-premiseTrains on Your DataCode is not used for training. Self-hosted option ensures code never leaves customer infrastructure.Founded2022Employees51-200

Visit Qodo

Frequently Asked Questions

Is Qodo GDPR compliant?

Qodo has a TrustKit compliance score of 68% (Strong). Data Residency: Self-hosted and on-premise deployment options available. Cloud version on US infrastructure. Enterprise customers can keep code entirely on their own infrastructure.. Legal Jurisdiction: Israeli company with adequate GDPR data transfer status. On-premise deployment mitigates jurisdiction concerns. Not subject to US CLOUD Act as primary entity..

Where does Qodo store data?

Qodo hosts data in: Cloud (US) or self-hosted / on-premise. Self-hosted and on-premise deployment options available. Cloud version on US infrastructure. Enterprise customers can keep code entirely on their own infrastructure.

Does Qodo train on user data?

Qodo: Code is not used for training. Self-hosted option ensures code never leaves customer infrastructure.. Code not used for training. Self-hosted option means code never leaves customer infrastructure. Clear data handling policies.