Security
How we keep your data secure and compliant.
GDPR ReadySOC 2 CompliantISO 27001
Data Handling
We only collect git metadata necessary for analytics. Code is never stored on our servers.
Encryption
All data is encrypted at rest (AES-256) and in transit (TLS 1.3).
GDPR & Compliance
We're GDPR ready and SOC 2 compliant. Enterprise plans include custom BAA.
GitHub Permissions
We use read-only OAuth scopes. We never modify your code or repositories.
Data Retention
Data retention depends on your plan. Enterprise customers can customize retention policies.
GitHub App Permissions
We request minimal, read-only permissions:
repo:read— Read repository metadata and coderead:user— Read user profile informationread:org— Read organization membership
Note: We never write to your repositories or modify any code.