Privacy Policy

Data Sanitization Policy

At CodeCritical, your source code is treated as ephemeral. We implement a strict No-Persistence policy for all analysis targets:

• Transient Lifecycle: Uploaded archives are extracted into isolated, randomized temporary directories.
• Automated Purge: Immediately following analysis completion, all source code and temporary artifacts are recursively and securely deleted from our systems.
• Zero Retention: We never store, cache, or train models on your source code.

Information We Collect

We only retain the results of the analysis (vulnerabilities, metrics, and security scores) and basic account information necessary for platform functionality. We do not sell or share your data with third parties.

Security Isolation

Every analysis runs in a hardened, air-gapped container environment. Our infrastructure is designed to prevent cross-contamination and ensure that your data remains isolated and secure during the brief window it exists on our platform.