Telerik AI Coding Assistants

GDPR overview

Progress publishes a Data Processing Addendum, a 27-page document that addresses Article 28 GDPR and also covers the UK GDPR, Brazil's LGPD, the CCPA and Swiss law. It incorporates the European Commission's Standard Contractual Clauses, and names the Netherlands as the default supervisory authority where no other is identified. Data subject requests run through a dedicated form, and privacy queries reach the PSC Data Protection Office in Burlington, Massachusetts. Progress states plainly that it is a US-headquartered company and that covered information is hosted and stored in the United States. Two gaps are worth naming: Progress nowhere claims GDPR compliance in so many words, and no Article 27 EU representative is designated in any page examined.

Who owns the data?

Progress states that the assistant has no access to your workspace or application code. It cautions, however, that the LLM you choose generates the parameters sent to the MCP server, and those parameters may carry fragments of your code to that model. Prompts and generated context are anonymised and are not tied to your Telerik account; Progress keeps them for statistical and troubleshooting purposes, and keeps usage metrics to police your licence quota. Under the Progress Data Processing Addendum, the customer remains controller of any personal data and Progress acts as processor. Progress explicitly refers users to the terms and privacy policy of whichever AI model and client they select.

Reuse rights

The code the assistant helps produce is yours to keep and ship: Progress positions the output as clean code you retain, with no reuse permission to request. Two limits are documented rather than legal. Progress tells users to double-check every solution before applying it to a project, and to avoid exposing proprietary or production data to any AI-enabled tool. On its own side, Progress commits that prompts are not used to train Telerik AI models, and that the assistant never produces the answer itself, only the context handed to the model you chose. Whatever that third-party model does with the request is governed by its own terms.

Data retention & training

Hosting summary

Progress states plainly that it is a US-headquartered company and that information covered by its privacy policy is hosted and stored in the United States, a jurisdiction it acknowledges does not offer data protection comparable to the European Union. Using the service is presented as agreement to that storage and processing. Transfers out of the EU are framed by the European Commission's Standard Contractual Clauses, incorporated into the Progress Data Processing Addendum, which names the Netherlands as the default supervisory authority where no other is identified. No hosting country other than the United States is named anywhere in the pages examined, and no regional data residency option is offered for this product. One meaningful exception applies: Progress documents an On-Premises deployment of the AI Coding Assistant, in which case hosting becomes the customer's own. Note too that the model answering your prompts is one you select, and its hosting is governed by that provider rather than by Progress.