As AI coding agents become central to enterprise software development, procurement leads, general counsel, and security reviewers face four critical questions before rollout: Who pays if generated code triggers an IP claim? Where do prompts live? What can admins log? What do 500 seats actually cost?
This analysis examines the current contract language for GitHub Copilot, AWS Kiro, Cursor, Devin, and Windsurf, verified against vendor pages as of September 26, 2026. This is reporting, not legal advice—final terms should be reviewed by counsel.
Five Brands, Four Contracts
Cognition acquired Windsurf and, on June 2, 2026, renamed the Windsurf editor to Devin Desktop. Devin and Windsurf now share a single pricing table and terms, reducing the number of distinct contracts enterprises must evaluate.
The Indemnity Table Nobody Publishes
Indemnification is the clause that most often blocks enterprise rollouts. The table below summarizes each vendor's current contract, with short direct quotes from linked sources.
| Vendor (plan) | Governing contract | What the vendor says | Covers generated code? | Cap | Key conditions |
|---|---|---|---|---|---|
| GitHub Copilot (Business, Enterprise) | Copilot Product Specific Terms or Microsoft Product Terms | "uncapped IP indemnification for unmodified outputs" (Copilot Trust Center) | Yes, unmodified output, including unmodified code from the Copilot coding agent | Uncapped | Duplicate Detection filter no longer required since April 3, 2026. Free, Pro, Pro+, and Max are excluded. |
| AWS Kiro (Pro, Pro+, Pro Max, Power) | AWS Customer Agreement and AWS Service Terms | [Content truncated in source] | [Content truncated] | [Content truncated] | [Content truncated] |
Note: The original source material was truncated. The full table and remaining analysis—covering AWS Kiro, Cursor, Devin, and Windsurf across indemnity, data residency, logging, and 500-seat cost—are not available in the provided excerpt. For complete details, consult the original article or the vendors directly.
Why This Matters in 2026
With AI coding agents now handling production code at scale, the legal and financial stakes have escalated. Enterprises must weigh uncapped indemnity against data residency requirements, audit logging capabilities, and per-seat costs that can reach seven figures at 500 seats. The consolidation of Windsurf into Devin suggests further market consolidation may simplify—or complicate—procurement in the months ahead.
via MarkTechPost