How Eunomio handles your data.

Eunomio, Inc. is a Delaware C-Corp. The data controller for everything described here is Eunomio, Inc. You can reach us at [email protected].

• Account data. Email, name, organisation, billing address.
• Repository contents. When you install CI Guard, we read GitHub Actions workflows and Terraform files in repos you grant access to.
• Pull-request diffs. Only the parts of diffs that touch CI auth or IAM.
• Operational logs. Request IDs, timestamps, error traces.

To provide the service you installed. We do not sell data, we do not train models on customer code, and we do not build profiles outside the scope of CI Guard.

Repository contents are processed to compute findings and post them on the originating PR. Operational logs are used to debug and improve reliability. Account and billing data are used to operate your subscription.

• Render - application hosting (US-East).
• Stripe - billing.
• GitHub - source of repository data.
• Postmark - transactional email.

We post changes to this list on /trust/ 30 days before they take effect.

United States. We do not currently offer EU residency. If that matters for your org, write to us before you install.

Findings are retained for 90 days after the related PR closes. Operational logs are retained for 30 days. Account data is retained for the life of the subscription plus 30 days.

You can export your data, correct it, or have it deleted by writing to [email protected]. We respond within one working day.

CI Guard is not directed at people under 16 and we do not knowingly collect data from them.

Material changes are announced 30 days before they take effect, on this page and by email to account owners.

[email protected] · Eunomio, Inc., postal address available on request.