Privacy policy

What we collect

Account information you provide: name, work email, GitHub identity, and the organization you connect to Bedrock.

Per-review metadata: schema diffs, generated reports, verdict, risk score, and engine telemetry. Stored encrypted at rest in eu-west-2.

Source code: fetched ephemerally per review only when blast-radius scanning is enabled. Code is never persisted to disk; AST nodes referenced in the report are stored, the raw source is not.

Operational logs: standard request logs (IP, user-agent, request path), retained 30 days for security and abuse monitoring.

What we don’t do

We don’t sell personal data. We never have, and our funding model doesn’t depend on it.

We don’t train shared models on your code. On Enterprise, the runner lives in your VPC and we never see your code at all. On Team, you can opt out of any model-vendor data sharing in one click.

We don’t share data with model providers without an opt-in for non-Enterprise plans. No code, no schema, no metadata.

How long we keep it

Reports and metadata: for the lifetime of your subscription, plus 90 days after cancellation, then permanently deleted unless you request earlier deletion.

Operational logs: 30 days.

Backups: encrypted, deleted within 35 days.

Your rights

Export: you can download every report we hold for your organization at any time from the dashboard.

Deletion: email privacy@bedrock.dev. We respond within 30 days, almost always within 5.

Access requests under GDPR / CCPA / UK-DPA: same address. We do not require a lawyer to be on the email.

Subprocessors

We publish the full subprocessor list at /security#subprocessors and notify customers 30 days before any change.

Contact

Data protection officer: privacy@bedrock.dev. Postal: Bedrock Labs Ltd., 14 Charterhouse Square, London EC1M 6AX, United Kingdom.