Your code, your reviewers, your rules
CodeFlow works on some of the most sensitive assets a company has. These are the commitments that apply to every engagement. Your security team can hold us to each one.
Access
- Read access only to the repositories you put in scope, plus permission to open pull requests.
- No admin rights, and no pushes to protected branches. Every change reaches you as a pull request.
- Access is removed at the end of the engagement, and you can revoke it at any time.
Your code
- Your code is used only to carry out your engagement.
- Your code is never used to train models, ours or anyone else's.
- Working copies and indexes are deleted when the engagement ends, or earlier on request, and we confirm the deletion in writing.
Language models
- Model calls go to Claude through the Claude API. Under Anthropic's commercial terms, API content is not used to train their models.
- Credentials and secrets stay in the build sandbox and are never included in model requests.
- If your policies require it, we scope a deployment that keeps processing inside your own cloud account.
Review and audit
- Nothing merges without your reviewers. CI, code owners and branch protection apply as usual.
- Each pull request explains what changed and lists every judgment call with its file and line.
- A run log records which files were read and changed for each batch, available to you on request.
Running a vendor review?
Send your security questionnaire or data processing agreement and we will work through it with your team before any access is granted.
Send a questionnaire
admin@codeflowconsulting.com