Security and data
This page details how Packmind handles your data
Last updated
Was this helpful?
This page details how Packmind handles your data
Last updated
Was this helpful?
In Packmind, we focus on storing the minimum amount of data needed. For each best coding practice created, we store the entire file containing the highlighted snippet (whether it's a positive or negative example) without linking it to your Git repository system.
Our database uses the encryption at rest principle, and all sensitive data, such as Git tokens, is encrypted with private secret keys, so it can't be decrypted by an external attacker.
Our data are stored using encryption at rest, using aes-xts algorithm with LUKS2.
With our , Packmind can fetch data from the latest code changes in your Git repositories. Packmind exclusively performs HTTP API REST calls from Gitlab and other platforms so that no git clone operation is made on our servers.
Thus, all your source code and Git information are loaded in memory, transit through HTTPS connections, and are volatile since they are not persisted anywhere.
With AI integrations Packmind lets you make the most of LLM engines such as Open AI or Azure Open AI.
OpenAI does not use any data for its internal data or model training. If Packmind connects to your specific LLM, you are in charge of ensuring the privacy of your data or discussing this topic with the LLM provider in case you don't host it internally.
While Packmind interacts with LLMs, as inputs for the prompts will be used:
Some parts of your source code (for analysis and suggestions for improvements)
Some parts of your coding practice metadata (name and description).
During that process, we do not store the prompts' input or output. We only store some statistics, such as the number of tokens sent and received.
To provide developers with feedback on whether or not their source code complies with their best practices, the IDE and code review plugins send parts of your source code to Packmind, which handles the code analysis engine. Data is sent through HTTPS and is kept volatile, as the source code that is analyzed is not persistent. Only statistics such as the number of results found and execution time are recorded.
For a given user, we only record their email and some data related to Packmind's plugin usage.
All personal data are stored in Europe, to remain compliant with GDPR regulations, and are handled by the following sub-contractors:
Clever Cloud - 3 RUE DE L ALLIER 44000 NANTES
Cloud Provider
France
Crisp - 2 BD DE LAUNAY 44100 NANTES
Customer Support
France