SECURITY &
PRIVACY.

OAuth scope: repo:status, read:user

We request the minimum GitHub OAuth scopes required. repo:status lets us read file contents. read:user displays your username. We never request write, admin, or webhook scopes.

No writes to your repository

euactguard never creates commits, pushes branches, opens pull requests, or modifies any file. The GitHub API token is used exclusively for GET requests.

Token stored in a short-lived cookie only

Your GitHub OAuth token lives in an httpOnly, Secure, SameSite=Lax cookie expiring after 1 hour. Never written to our database. Revoke instantly from settings or directly from GitHub.

We store: compliance findings and scores

We save article scores, violation summaries, file paths where violations were found, and recommended remediations. This is the output your report is built from.

We do NOT store: your source code

We fetch files from GitHub only long enough to run analysis in memory. No source file content is written to disk or stored in our database.

We do NOT store: your GitHub token

OAuth tokens are stored only in short-lived session cookies. They are never persisted to our Postgres database or any third-party service.

Hosted on Vercel + Supabase

Our application runs on Vercel (edge functions, CDN) and Supabase (Postgres + auth). Both providers maintain SOC 2 Type II compliance.

Encryption in transit and at rest

All data is encrypted in transit via TLS 1.3. Supabase encrypts data at rest using AES-256. No unencrypted storage paths exist.

AI analysis via Anthropic

Code analysis uses the Anthropic API. Snippets are sent for analysis and not retained by Anthropic beyond the API call per their data retention policy.

Delete your account and data

You can delete your account and all associated scan data at any time from Settings. Deletion is permanent and immediate.

Export your data

All scan results can be exported as JSON or PDF at any time from the scan detail page. Your data is yours.

Revoke GitHub access

You can revoke GitHub OAuth access at any time from your GitHub settings under Authorized OAuth Apps, independently of your euactguard account.