Harness AI adds a chat DevOps Agent that drafts Harness pipelines, services, connectors and OPA Rego policies from natural language, plus Worker Agents running inside pipeline steps for tests and PR review.
MCP server from https://developer.harness.io/harness-platform/use-harness-ai/harness-ai; module list from DevOps Agent doc. Specific Git hosts not enumerated on reviewed pages.
Limitations
DevOps Agent only in Harness UI; cannot generate secret values or accept connector credentials; generated configs need review (e.g. replace 'latest' tags); not available for self-managed (SMP) customers; no bring-your-own-model; ToS: 'Harness AI is not intended to replace human judgment or review' and Output may not be unique
SMP/BYOM from https://developer.harness.io/harness-ai/use-harness-ai/core-capabilities; ToS from https://www.harness.io/legal/subscription-terms s.3.6(c).
Data and controls
Does it train AI on your data?
Not used for training — "Harness may not use Customer Data to (i) train or improve any third party models; or (ii) improve Harness AI."
Subscription Terms s.3.6(d). Docs: input "not stored, not logged, and never used for training" by Harness or model providers (https://developer.harness.io/harness-ai/use-harness-ai/core-capabilities). Note s.3.5 allows use of 'Usage Data' to improve the platform (not stated as AI training).
Certificates and audit reports
Self-stated on security page: SOC 2 ('We're SOC 2 compliant', type not stated), SOC 1, ISO 27001 ('Certified'), ISO 27017, ISO 27018, FedRAMP ('Listed on marketplace'); scope and auditors not stated
Company-level scope; confirm Harness AI coverage. SOC reports are attestations.
Additional data conditions
Subprocessors and underlying models
Default Claude Opus 4.8 (Anthropic) on AWS Bedrock and Google Vertex AI; OpenAI GPT-4o as rare fallback under Zero Data Retention; Google Gemini Flash listed in code-translation FAQ; no bring-your-own-model for AI Chat/DevOps Agent
Gemini Flash and GPT-4o are named; confirm the model used for your selected feature.
Retention and deletion
AI inputs not stored beyond inference; Bedrock/Vertex purge 'immediately after inference' (0 days); OpenAI fallback under ZDR (0 days). Contract: Customer Data deleted within 30 days of request; export within 30 days of termination; backups per standard retention policies
The provider’s own sources say different things here. Contract terms s.8.4 https://www.harness.io/legal/subscription-terms (page header 'Last updated Aug 31, 2026' vs version block 'August 24, 2026' — date inconsistency).
Signals only; Harness AI is a feature of the Harness platform rather than a standalone product.
Code review controls
Error-analyzer fixes: review 'Pipeline Fix Summary and Updated Step YAML' then select "Accept" to apply; services/environments/secrets created only after user selects "Create". No confirmation step documented for pipeline/stage/step edits, connector changes or GitOps operations from chat. RBAC permissions required. ToS: "Harness AI is not intended to replace human judgment or review."
The described confirmations apply to the cited error-analysis and setup actions. Agree the required approval and review controls for other agent actions before use.
Intellectual-property indemnity
Yes — Harness defends claims that "the Harness Platform or Output, when used by Customer as authorized in this Agreement, infringes or misappropriates" third-party IP; excludes modification/unauthorised use or combination with non-Harness items
A written comparison of up to three AI offerings · €195 net
You get the facts that matter for your decision, each with its source, the questions to ask each vendor and a cost estimate based on your own numbers. First you agree your three most important criteria with Sten Franke.
We deliver your brief by email within a maximum of five working days after payment is confirmed and we have agreed the question and minimum information needed to begin. ETHORITY confirms the start date and delivery date and delivers earlier when the reviewed brief is ready. Missing optional information is recorded and assessed; it does not require you to research the solution yourself. Review before delivery and email support are included.
ETHORITY®