Data handling and privacy
devlo doesn’t store your source code or train on it. It keeps the results of its work, your settings, and your chats for your dashboard and analytics, until you ask it to delete them.
Your code
Section titled “Your code”- devlo uses your code only to provide the service you ask for.
- For reviews, coding runs, and automations, devlo works on a temporary copy of your repository and deletes it when the run ends.
- devlo has zero-data-retention agreements with its AI model providers.
- Data is encrypted in transit.
- Each run happens in an isolated environment.
- Access to your code is limited to the systems that provide the service and to authorized devlo staff.
What devlo keeps
Section titled “What devlo keeps”- Account information and sign-in details.
- Organization settings, such as repositories, members, automations, and integrations.
- Review comments devlo posted, with the lines of code they’re on, and their outcomes, for analytics.
- Titles, descriptions, and activity of pull requests on connected repositories, for analytics.
- Lessons saved from review feedback, per repository. See Teach devlo.
- Run history.
- Chat history for projects, repository chats, and the Assistant, and the files of projects you build in devlo. Changes from a repository chat live on a branch in your GitHub repository.
Who in your organization sees what
Section titled “Who in your organization sees what”Owners and admins see Analytics (including per-member credit use on AI Usage), Contribution (including the code behind each outcome), run history, and billing. Members with the user role don’t.
What is public
Section titled “What is public”- Preview links are public. Anyone with one can open the preview of a project or repository chat, even when you aren’t using it. See Preview, Code, and Admin.
- Published sites are public. See Publish and custom domains.
Delete your data
Section titled “Delete your data”Removing devlo from GitHub, Slack, or Jira stops new work but keeps your reviews, analytics, and chats. Uninstalling the GitHub App also removes members and roles.
To delete your account or personal information, use the contact form. To delete a project or repository chat, or to unpublish a site, email help@devlo.ai. To remove devlo from GitHub, Slack, or Jira, see Remove devlo’s access.
SOC 2 and legal documents
Section titled “SOC 2 and legal documents”devlo is SOC 2 Type II compliant and runs regular security audits and penetration testing. Its SOC 2 reports are in the Trust Center.
Open the Trust Center- Sub-processors
- Terms of Service and Privacy Policy, the authoritative sources for this page
For a security review or a data processing agreement, contact sales.
Related
Section titled “Related”Also known as: compliance, SOC 2 compliance, privacy, data retention, training, data handling, delete my data, encryption, isolation, what devlo stores, SOC 2, SOC2, Trust Center, DPA, sub-processors, subprocessors, legal, terms, privacy policy.