Security at AutoStandup
Your code is your most valuable asset. We've built AutoStandup from the ground up with security as a core principle, ensuring your codebase remains completely protected.
We Never Access Your Source Code
AutoStandup only reads commit metadata (messages, authors, timestamps, file names). Your actual code content is never transmitted to, processed by, or stored on our servers. Your intellectual property stays exactly where it belongs – in your repositories.
How We Keep Your Data Safe
End-to-End Encryption
All data transmitted between your systems and AutoStandup is encrypted using TLS 1.3. Your code never leaves your repositories – we only access commit metadata.
Minimal Data Access
We follow the principle of least privilege. AutoStandup only requests the minimum permissions needed: read-only access to commit messages, branch names, and file names. We never access your actual source code.
Secure Infrastructure
Our infrastructure runs on enterprise-grade cloud providers with SOC 2 compliance. All servers are located in secure data centers with 24/7 monitoring and automatic threat detection.
OAuth 2.0 Authentication
We use industry-standard OAuth 2.0 for all integrations. Your credentials are never stored on our servers – authentication is handled directly by GitHub, Bitbucket, and Slack.
No Code Storage
AutoStandup never stores, copies, or caches your source code. We process commit metadata in real-time and only retain the generated standup summaries.
Regular Security Audits
Our systems undergo regular security assessments and penetration testing. We continuously monitor for vulnerabilities and apply security patches promptly.
Compliance & Data Rights
GDPR Compliant
Full compliance with EU data protection regulations
Data Retention Controls
You control how long your data is retained
Right to Deletion
Request complete data deletion at any time
Data Portability
Export your data in standard formats
Integration Security
GitHub & Bitbucket
We use OAuth 2.0 with read-only scopes. AutoStandup requests onlyrepo:readpermissions – we cannot modify your repositories, create commits, or access private files. Token permissions can be revoked at any time from your GitHub/Bitbucket settings.
Slack
Our Slack integration uses OAuth 2.0 with minimal scopes. We only request permission to post messages to channels you explicitly authorize. We cannot read your messages, access your files, or view channels we haven't been invited to.
Have Security Questions?
We take security seriously. If you have questions about our security practices or want to report a vulnerability, please reach out.
Contact Our Security Team