Data Privacy & Security
TestForge servers never receive your user stories, acceptance criteria, generated tests, or test code. The extension makes zero outbound calls to AT Conseil / TestForge infrastructure.
Data flow by operation
Public providers
When you configure OpenAI, Mistral, Gemini, or Anthropic, your work item content travels to an API outside your tenant. TestForge displays a non-dismissible warning before saving this configuration. For regulated environments (banking, public sector, healthcare), use Azure AI Foundry or Azure OpenAI Service.Anthropic proxy
The proxy template we provide is:- Open-source and auditable (MIT licence)
- Deployed in your own tenant (Azure Function or Cloudflare Worker)
- AT Conseil never operates this proxy — you own and control it entirely
ADO permission scopes
TestForge does not request access to: pipelines, builds, releases, project settings, user management, or billing.