| Attribute | Amazon Q Developer | Devin | Decision |
|---|---|---|---|
| Audit log of agent actions |
Not measured
Not measured
Checked 2 addresses on 2026-09-02: aws.amazon.com, aws.amazon.com
|
Not measured
Not measured
Checked 1 address on 2026-09-02: cognition.com
|
not measured on at least one side |
| Data processing agreement offered |
Not measured
Not measured
Checked 2 addresses on 2026-09-02: aws.amazon.com, aws.amazon.com
|
Yes
Verified90
|
not measured on at least one side |
| FedRAMP authorisation |
Not measured
Not measured
Checked 2 addresses on 2026-09-02: aws.amazon.com, aws.amazon.com
|
Not measured
Not measured
Checked 2 addresses on 2026-09-02: cognition.ai, cognition.com
|
not measured on at least one side |
| GDPR compliance stated |
Not measured
Not measured
Checked 2 addresses on 2026-09-02: aws.amazon.com, aws.amazon.com
|
Not measured
Not measured
Checked 2 addresses on 2026-09-02: cognition.ai, cognition.com
|
not measured on at least one side |
| ISO/IEC 27001 |
Not measured
Not measured
Checked 2 addresses on 2026-09-02: aws.amazon.com, aws.amazon.com
|
Yes
Verified90
cognition.com (tier 1), retrieved 2026-09-02
|
not measured on at least one side |
| SCIM user provisioning |
Not measured
Not measured
Checked 4 addresses on 2026-09-02: aws.amazon.com, aws.amazon.com, aws.amazon.com, docs.aws.amazon.com
|
Not measured
Not measured
Checked 2 addresses on 2026-09-02: cognition.ai, cognition.com
|
not measured on at least one side |
| SOC 2 Type II |
Not measured
Not measured
Checked 2 addresses on 2026-09-02: aws.amazon.com, aws.amazon.com
|
Yes
Verified90
cognition.com (tier 1), retrieved 2026-09-02
|
not measured on at least one side |
A missing measurement never counts
against a product. If we could not reach a document, that is a fact
about our research and not about the vendor.