Ask me about Copperleaf Lending
I can see every account's health, adoption, spend, plan, and customer questions. Nothing you ask here is saved.
Try asking
Claude can make mistakes. Check the account before you act.
Digital lending · 1,400 employees · Champion: Dan Okafor, VP Engineering
Before purchase
Day 11
Up next
All three questions are about security and compliance. The CISO's concerns from the deal are reaching the team, so the exclusions and audit story should go out soon.
Security · 2
Where code goes, and how to exclude the loan decisioning repo.
Compliance · 1
Audit logging for state and CFPB exams.
From the Ask tab in their onboarding app, newest first.
Is there an audit log for Copilot usage?
Partly. The enterprise audit log records changes to Copilot settings, policies, and licenses, plus agent activity on GitHub. It does not include the prompts people send from their editor. For usage, the Copilot usage metrics dashboard shows active users over time. Together they give you a solid base for the audit story your regulators will ask about.
What do I tell our CISO about where code goes?
Send them GitHub's "Resources for getting approval of GitHub Copilot" page. It collects the terms, data protection agreement, and trust center links security teams ask for. The key points for your CISO: GitHub's documentation says it does not use Copilot Business or Copilot Enterprise customer data to train AI models, and content exclusions keep your most sensitive repositories out of Copilot.
How do I exclude our loan decisioning repo from Copilot?
Add the repository under content exclusions in your organization's Copilot settings, or in the repository's own settings. You can exclude a whole repository or specific paths. Once it's saved, Copilot won't use those files as context or offer suggestions in them. Test it by opening an excluded file in VS Code and JetBrains.