Really depends on the ToS. Security officers will always have strong opinions around sending NDA'd code and data to 3rd party services. Us engineers have all sorts of scary access levels :)