# Windsurf

## Kurzbeschreibung
**"Built to Keep You in Flow State"**


**Windsurf **is an AI-powered coding assistant, or rather an agentic IDE for software development.


The Windsurf Editor combines the local agent Cascade with the cloud agent Devin, supports model routing via Adaptive, offers IDE integrations, MCP connections, previews, and team/enterprise features for governance, security, and deployment. The tool is aimed primarily at developers, technical teams, and companies, not general office users.

## Claim
Built to Keep You in Flow State

## Geeignet für
- Automation / Workflows
- Programming / Software Development
- Websites / Landing Pages

## Kernfunktionen
- App Development
- AI Agents
- Programming

## Preismodell
- **free:** Light Usage Allowance, Tab, Previews/Deploys depending on the limit and getting started in Windsurf.
- **subscription:** **Pro** Standard Usage Allowance, unlimited core features, additional usage at the API price.


**Max** Heavy Usage Allowance for power users and high agent/coding usage.
- **other:** **Teams **Team plan with centralized billing, admin dashboard, analytics, support, and team features.

**Enterprise** SSO, access controls, RBAC, volume discounts, hybrid deployment, account management, and custom deployment.

## DSGVO und Datenschutz
**Gesamteinschätzung:** Conditional

**Overall assessment of hosting & data: **

Windsurf offers cloud, enterprise cloud, hybrid, and self-hosted deployment. Particularly strong is the enterprise hybrid approach, in which data-bearing functions run in a customer-owned instance, as well as self-hosted with private cloud or on-premises. Positive aspects include ZDR, EU clusters, a FedRAMP option, SSO, RBAC, audit logs, custom trusted LLM endpoints, and enterprise controls. A critical point is that, according to Windsurf, self-hosted does not fully support all of the latest product features such as Editor or Cascade. 


**Conclusion: **


Windsurf is one of the stronger candidates for companies that want to combine AI coding with controllable data flows; for maximum GDPR control, Enterprise EU, Hybrid, or Self-hosted are preferable.




[Security](https://windsurf.com/security)
[Privacy Policy](https://windsurf.com/privacy-policy)

**GDPR assessment:** From a GDPR perspective, Windsurf is conditionally to well suited, especially for Teams, Enterprise, EU cluster, Hybrid, or Self-hosted. 


**Positive **is that Windsurf documents SOC 2 Type II, penetration tests, Zero Data Retention as standard for Teams/Enterprise, and ZDR opt-in for Individual plans. Also positive are EU servers in Frankfurt for Enterprise options, Hybrid Deployment with a customer-owned data-hosting instance, and Self-hosted Deployment in the company’s own private cloud or on-premises. 


**Negative** is that in cloud plans, requests may pass through Windsurf servers and subprocessors; certain features such as web search, MCP, or remote indexing may require data retention or subprocessors without ZDR. 


**Server location: **Standard cloud USA; Enterprise EU option Frankfurt; Hybrid/Self-hosted controllable by the customer. Further link: Windsurf Security and Pricing.


[Security](https://windsurf.com/security)
[Privacy Policy](https://windsurf.com/privacy-policy)

## Hosting und Daten
- **On-Prem / lokales Hosting:** teilweise / indirekt
- **Private Cloud / Rechenzentrum:** abgedeckt
- **EU SaaS / Managed:** abgedeckt
- **Hybrid:** abgedeckt
- **AVV / DPA:** unknown
- **Kein Training auf Kundendaten:** abgedeckt
- **Open-Source / Transparenz-Pfad:** teilweise / indirekt

## Standort
**Land:** USA

**Taxonomie:** USA

The Terms of Service name Exafunction, Inc., 900 Villa Street, Mountain View, CA 94041, USA; the Privacy Policy names Exafunction, Inc., 990 Villa St., Mountain View, CA 94041, USA.

## Vorteile
- Very strong focus on software development with deep codebase context.
- Combination of local work and cloud agents (Devin).
- Broad model support including proprietary SWE models and adaptive routers.
- Enterprise focus with RBAC, SSO, hybrid, EU region, and zero-data-retention options.
- MCP support and integration path for proprietary tools/services.

## Nachteile
- For data protection and data residency, standard SaaS usage is not automatically ideal, since according to Privacy/Security, standard servers are located in the USA and certain features may require retention or third-party access.
- Self-hosted is possible, but according to the Security page, it does not fully support many of the most modern Windsurf features such as the Windsurf Editor or Cascade.
- Self-Serve costs are usage-based; Extra Usage is billed at API list prices and is therefore less predictable.
- According to Troubleshooting, premium models may occasionally run into rate limits.
- New Teams plans no longer include SSO; it is now Enterprise-only.

## Quellen
- Offizielle Website: https://windsurf.com/

## Letzter Datenstand
2026-04-27

## Originalseite
https://kifox.ai/en/ki-tools/windsurf-en/