As long as they don't distribute the code, it's not a problem. Companies can maintain an in-house fork of GPL projects without having to release the source.
No. If you have Affero GPL (AGPL) licenced code, you have to make the source code available if you make the programme "accessible to the public over the internet", even if you don't distribute the code. It's a new licence from the FSF, designed for web applications and the modern 'cloud'/'internet' world.
