Question

A security engineer at a fintech company is documenting how source code from developers' IDEs reaches the GitHub Copilot model when an inline completion is triggered. They need to confirm how the prompt data is protected while it moves between the editor and the Copilot backend. Which statement accurately describes the handling of this input data in transit?

Accepted Answer

The prompt is transmitted over an encrypted TLS connection to the Copilot proxy, which relays it to the model; it is not persisted as training data for Business/Enterprise plans.

Answer

The prompt is stored in plaintext on the local disk and synced to GitHub servers on a nightly batch job before being sent to the model.

Answer

The prompt is always retained indefinitely and used to train the base foundation model regardless of the customer's plan.

Answer

The prompt bypasses the Copilot proxy entirely and connects the IDE directly to the model provider's public API without any GitHub-managed intermediary.