Security and trust
What happens to your code.
Who sees it, how long we keep it, and what we don't claim. Each answer describes how Warrantee runs today.
Your code
- What can Warrantee reach?
- Only the GitHub repositories you select when you connect us. Not your other repositories, and never your live app. For a new build without GitHub, you download the finished code as a zip.
- Where does the work happen?
- In a sealed copy of your code. Tests run in a throwaway sandbox that can't reach our internal services or the internet, beyond a package cache. Nothing changes in your repository until you merge the change.
- How long do you keep it?
- Our working copy of your code is deleted once it has gone unused for 14 days. For a new build we keep it 90 days. Our record of a job's steps expires after 90 days, and what our system learns across jobs never contains code.
The AI models
- Who sees my code?
- Today, AI models hosted by Ollama read it to do the work. Ollama's policy says cloud prompts and responses are processed only to serve the request, are not stored beyond that, and are never used to train models. Processing may happen in the United States. If we change providers, this page changes first. Ollama's privacy policy
- What about passwords and keys in my code?
- They are swapped for placeholders before any model reads your code, so no model sees them. If a change needs to touch that line, the real value is put back only when the change is saved.
- Does one AI mark its own work?
- No. The model that writes a change never approves it. A reviewer model from a different company reads every change, and a job won't start if the two would come from the same family.
Your account
- When do I pay?
- One fixed price, shown before any work starts. Approving holds it; the hold is charged only when the job is proven and delivered, and released if it isn't. Payments go through Razorpay in India and Stripe elsewhere, so your card and bank details never reach us.
- Can someone run up costs on my account?
- Every account has limits on how many jobs can wait for approval and how many can start in a day, so a stolen login or a script can't start jobs without end.
- What do you keep about me from the waitlist?
- Your email, the optional answers you tapped, and a WhatsApp number only if you gave one. See the privacy page for how to have it deleted.
What we don't claim
- We don't have a SOC 2 or ISO 27001 certificate yet.
- Warrantee is not a penetration test or a security audit. Our security checks find known risky patterns, leaked keys and vulnerable libraries, and a serious finding stops a change.
- No check catches everything. That's why the warranty exists, and why every miss we find becomes a new check.