Security by default

Encrypted in transit and at rest

All data is encrypted with TLS 1.2+ in transit and AES-256 at rest, including error payloads and stored source diffs.

Least-privilege by default

The GitHub App requests only the permissions it needs to watch pushes and post checks — never write access to settings.

Configurable data retention

Autopsy history and raw error payloads follow a retention window you control, with deletion on request.