windsurf-data-handling

# Windsurf Data Handling ## Overview Control what code and data Windsurf's AI (Cascade, Supercomplete) can access. Covers file exclusion patterns, telemetry controls, Codeium's data processing model, and compliance configuration for regulated environments. ## Prerequisites - Windsurf IDE installed - Understanding of Codeium's data processing model - Identified sensitive files and directories in workspace ## Instructions ### Step 1: Understand Codeium's Data Model ```yaml # What happens with your code in Windsurf data_flow: indexed_locally: what: "File contents, structure, dependencies" where: "Local machine only" purpose: "Supercomplete context, Cascade awareness" retention: "Persists until re-indexed" sent_to_cloud: what: "Cascade prompts, code snippets around cursor" where: "Codeium cloud (or self-hosted for Enterprise)" purpose: "AI model inference" retention: "Zero-data retention for ALL paid plans" never_processed: what: "Files in .codeiumignore, .gitignore, node_modules" where: "N/A" purpose: "N/A" compliance: certifications: ["SOC 2 Type II", "FedRAMP High"] hipaa: "BAA available for Enterprise customers" data_retention: "Zero for paid plans, configurable for Enterprise" deployment: "Cloud, Hybrid, or Self-Hosted options" ``` ### Step 2: Configure .codeiumignore for Data Protection ```gitignore # .codeiumignore — files Windsurf AI will NEVER see or index # Uses gitignore syntax. Default: .git...