Devin merges its own pull requests for Nubank; no audit trail, insurance or compliance certification disclosed

Cognition Labs' autonomous coding agent Devin ships pull requests "the way your team does — picking up review feedback and CI results to get each PR approved and merged," according to the company's website. A human is "kept in the loop just to manage the project and approve Devin's changes," the site states.

The company names one customer, Brazilian digital bank Nubank. Nubank's "Data, Collections, and Risk business units verified and completed their migrations in weeks instead of months or years," Cognition's site says. Nubank engineers supplied examples of past manual migrations, "some of which were fed to Devin for fine-tuning," and Cognition reports "a doubling of Devin's task completion scores after fine-tuning" against its own evaluation set — a measurement the company generated, not an independently verified one.

The site also states Devin "can spin up a team of Devins for large tasks." It lists integrations including GitHub, Slack, Databricks, Snowflake and Stripe, and deployment through cloud, desktop, CLI, review and Windows VM interfaces.

An AI Dispatch review of the page found none of the five trust-gap disclosures the outlet tracks: no audit-trail mechanism, no named compliance certification, no insurance or customer indemnity, no outcome-linked pricing, and no enforced runtime limit on what the agent can do beyond the stated human-approval step. Pricing itself is not disclosed on the page reviewed.

Cognition's own account is that Devin already merges code into a financial-services company's production systems, coordinating multiple instances of itself on large jobs, without any of those five disclosures published.