Security and Data Handling
What happens to your code and credentials, stated plainly.
Your code
- Sent to our backend and AI providers only to produce a review.
- Never used to train models.
- Review results are stored against your account so you can revisit them.
Your credentials
- GitHub OAuth tokens are encrypted at rest.
- GitHub API calls run through a server-side proxy, never from the browser.
- Incoming webhooks are signature-verified before processing.
- Repository access is limited to what you select.
Compliance posture
- SOC 2-aligned practices. We do not hold a SOC 2 certification and do not claim one.
- GDPR-ready handling of account data.
- Account deletion removes your stored reviews.
Free plan available. No credit card required.