Cognition
- Rank
- Score
- 28/149
- 50 out of 100
Cognition is an American artificial intelligence company headquartered in San Francisco, founded in November 2023 by Scott Wu, Steven Hao and Walden Yan. It develops Devin AI, an autonomous software engineering agent that plans and writes code, and Devin Desktop, an agentic coding app formerly known as Windsurf.
Is Devin safe?
Devin scores 50 out of 100 and ranks 28 of 149. Its strongest category is Security, and its weakest category is Transparency.
How is Devin scored?
Devin is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50cognition.com (opens in a new tab) · 2 Nov 2026 - No
Did an outside organisation test the model before release?
Company claim0/50cognition.com (opens in a new tab) · 2 Nov 2026
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50cognition.com (opens in a new tab) · 2 Nov 2026 - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“The Services are not intended for children, and we do not knowingly request or collect any personal information from children.”
cognition.com privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
50Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“Today we’re introducing SWE-2, our most advanced coding model yet.”
cognition.com (opens in a new tab) · 2 Nov 2026 - Yes
Does the model card report test results?
Company claim25/25“On FrontierCode 1.1 Main, we see that SWE-2 medium scores higher than SWE-1.7 while taking 58% fewer turns and costing 81% less on average.”
cognition.com (opens in a new tab) · 2 Nov 2026 - No
Does the model card state the model's limitations?
Company claim0/25cognition.com (opens in a new tab) · 2 Nov 2026 - No
Does the model card describe safety safeguards?
Company claim0/25cognition.com (opens in a new tab) · 2 Nov 2026
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
Security programme and certifications
67Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“To report a security vulnerability, please visit https://hackerone.com/cognition.”
cognition.com (opens in a new tab) · 20 Oct 2026 - Yes
Does it state it holds a SOC 2 Type II report?
Company claim33/33“Licensor maintains best practices for securing and operating its cloud infrastructure, including the following measures: Separate production…” MoreLess
“Licensor maintains best practices for securing and operating its cloud infrastructure, including the following measures: Separate production and non-production environments; Primary backend resources are deployed behind a VPN; All employees are issued company devices and prohibited from using personal devices; All devices are provisioned via MDM, and devices are protected in the event of physical loss; Keys for cryptographic protected are securely managed and stored in AWS KMS; Services logs are monitored for security and availability; Licensor’s maintains the following policies and standards: (1) information security policy; (2) computer and network security policy; (3) access control policy; (4) asset management policy; (5) incident management response policy; Licensor maintains a SOC 2 Type II certification.”
cognition.com (opens in a new tab) · 2 Nov 2026 - No
Does it state it holds ISO 27001 certification?
Company claim0/33cognition.com security page (opens in a new tab) · 20 Oct 2026
Software vulnerabilities
Not enough dataData breaches
Not enough dataClear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“We collect, and in the past 12 months have collected, the following personal information about you: Information you provide to us Descriptio…” MoreLess
“We collect, and in the past 12 months have collected, the following personal information about you: Information you provide to us Description Contact Information First name, last name, email address, phone number, and company name (if any).”
cognition.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“To customize your experience with our Services and otherwise improve our Services including, depending on the terms that apply to your use o…” MoreLess
“To customize your experience with our Services and otherwise improve our Services including, depending on the terms that apply to your use of the Services, using User Content to train, fine tune and improve the models that power our Services.”
cognition.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“We retain your personal information as needed to provide our Service to you, comply with legal obligations, or protect ours or others intere…” MoreLess
“We retain your personal information as needed to provide our Service to you, comply with legal obligations, or protect ours or others interests.”
cognition.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“Other Third Parties - Certain features allow you to display or share information with other users or third parties.”
cognition.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“Right to rectification/correction: You may have the right to request us to rectify or update any of your personal information that is incomp…” MoreLess
“Right to rectification/correction: You may have the right to request us to rectify or update any of your personal information that is incomplete or inaccurate.”
cognition.com privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100cognition.com privacy policy (opens in a new tab) · 20 Oct 2026 - No
Can you stop your data being used for training?
Company claim0/50cognition.com privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“Right to access/know and portability: You may have the right to request that we provide you a copy of your personal information held by us,…” MoreLess
“Right to access/know and portability: You may have the right to request that we provide you a copy of your personal information held by us, or for details relating to the ways in which we use and disclose your personal information, and how we have used or disclosed your personal information in the past.”
cognition.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“Right to deletion/erasure: You may have the right to request to erase your personal information.”
cognition.com privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“If you have any questions, or to exercise any available rights, please contact us at privacy@cognition.ai.”
cognition.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority.”
cognition.com privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
3 Nov 2026
Score 50
Method 3 Nov 2026
+8 · Method update and new evidence
2 Nov 2026
Score 42
Method 2 Nov 2026
+4 · Method update and new evidence
23 Oct 2026
Score 38
Method 21 Oct 2026
+3 · Data fix
21 Oct 2026
Score 35
Method 21 Oct 2026
-3 · Method update
20 Oct 2026
Score 38
Method Not recorded
+3 · Reason not recorded
15 Oct 2026
Score 35
Method Not recorded
-1
14 Oct 2026
Score 36
Method Not recorded
-