[lelandfe]

Not an answer to your overall question of compliance, but to the specific point:

> Copilot for Business does not retain any telemetry or Code Snippets Data.

https://docs.github.com/en/copilot/configuring-github-copilo...

[the_duke]

The key word being "retain".

It's probably still sent to their servers.

[ilc]

And if that page changes without notifying you?

... Unless they are selling the compliance as a feature, be careful.

[dx034]

As long as it's part of the agreement, they would need to at least notify you if they're planning to change that.