KiloConnect

Security Measures

Authentication via GitHub OAuth with scoped repository permissions. Role-based access controls limit data access to authorized personnel. Audit logging tracks all system access and changes. Incident response plan with defined escalation procedures and 24-hour response SLA.

Data Handling

All data encrypted in transit (TLS 1.2+) and at rest (AES-256). We collect only repository data necessary for code review, indexing, and deployment features. Code is processed in isolated environments and not used for model training. Data retained only for active session duration unless explicitly cached by user. Infrastructure hosted in US regions (Vercel, Supabase).

Compliance

SOC 2 Type 1 certified. Trust report available at https://trust.kilo.ai. Currently pursuing SOC 2 Type 2 certification.