Security and data handling

Least privilege

The Day0 GitHub App installs read-only. Write permissions are requested only when a workspace raises a crew member's autonomy, and your org admin approves the upgrade on GitHub.

Code handling

The Delivery Ceiling Report uses pull request metadata only, never file contents. Agents fetch diffs and files on demand. Snippets are kept for the period you choose: none, 7 or 30 days (default 7). Search indexes store only path, line range and a hash.

Model providers

Models run under provider terms where API inputs aren't used for training, with zero-retention options where available.

Isolation

Each workspace's data is isolated at the database level. Third-party tokens are encrypted per workspace. Incoming webhooks are signed, with key rotation.

Audit

Every agent action, approval, override, policy change, export and sign-in is logged.

Abuse and safety

Public forms have a bot check and rate limits. Workspace and per-agent kill switches and budget guards stop automation instantly.

Roadmap

• SOC 2 Type I, targeted within 6 months of launch.
• SAML SSO and SCIM.

Questions? Write to security@day0.dev.