01Security
Five layers around your data.
DevLyTicks reads activity metadata, never source code, and keeps it encrypted on EU infrastructure. Explore the stack layer by layer.
Read-only access to activity metadata.
- Commit history, PR status, deployment events, membership
- Source code content is never read or stored
- Disconnect a provider any time to stop collection
- GDPR
- Aligned
- We design our processes around EU data protection requirements
- CCPA
- Aligned
- We honor CCPA rights for California residents
- SOC 2 Type II
- In progress
- Certification in progress
02Data path
Metadata in. Source code never.
We only collect the repository metadata needed for analytics. Your actual source code never leaves your source provider.
- 01Your providerGitHub, GitLab, Azure DevOps, Bitbucket
- 02Metadata onlyRead-only API access
- 03Encrypted storeAES-256 at rest, EU hosted
- 04Your dashboardMFA and role-based access
Collected
- Commit metadata
- Pull request status
- Deployment events
- Organization membership
Never collected
- Source code contents
- Secrets in your repositories
- Sensitive files
03Operations
When something breaks, a runbook runs.
Incident response
| Application | Secure coding practices and code reviews |
|---|---|
| Application | Dependency scanning and vulnerability management |
| Application | Regular security training for our team |
| Operations | 24/7 security monitoring and automated threat detection |
| Operations | Regular penetration testing and security audits |
| Operations | Disaster recovery procedures in place |
04Disclosure
Found a vulnerability? Tell us first.
We welcome security researchers. Report issues responsibly and we respond within 24 hours. PGP key available upon request.
- Response within 24 hours
- Coordinated disclosure
Use the arrow keys to inspect days.