$ git diff main -- deployment/saas-only.md
7 of the 19 tracked tools are SaaS-only with no self-host path: Codacy, Sourcery, Graphite Reviewer, GitHub Copilot Code Review, Cursor BugBot, Qlty, Augment Code Review. SaaS-only is the cheapest entry point but ships code context to the vendor's plane. Acceptable for most product engineering shops; a blocker for regulated environments.
3Graphite Reviewer - Team $40 per user/month (billed annually, unlimited AI Reviews)src
4GitHub Copilot Code Review - Bundled in Copilot Business $19/user/mosrc
5Cursor BugBot - Usage-based on a Cursor plan, with no published BugBot ratesrc
7Augment Code Review - Standard $20/mo flat for the team (up to 50 seats, $20 usage included)src
1-PR diffs, code context, file paths, sometimes commit history. Always.
2-Issue descriptions and reviewer comments. Often.
3+Most SaaS vendors offer EU-region processing on request. Ask explicitly; do not assume.
4+SOC 2 Type II is table stakes; check the trust page (CodeRabbit, Greptile, GitHub all publish current reports).
1+Product engineering shops with no regulated workloads
2+Startups under 100 devs - the ops savings outweigh the marginal residency risk
3+Open-source projects where the code is public anyway
1-Regulated industries with code-as-IP designation
2-Government / defence with sovereignty requirements
3-Customer-trust-led companies that publish a "your code never leaves us" story