Security & compliance

Honesty rule: ReviewPilot helps surface risk; it is not a security certification, penetration test, or legal advice. We do not claim “never miss” or “100% secure.”

Fail-closed PR gate

If AI or analyzers are unavailable, the PR is flagged for human review — never a silent approve. Demo mode is explicitly labeled. Live success responses carry source: Model-assisted.

Data minimization

Only the pull-request diff (changed lines) is sent to the review model. Static secret/SAST checks run locally via Gitleaks/Semgrep. Full-repo training on customer code is not part of the product posture; Enterprise can add BYOK and contractual no-training terms.

OWASP LLM01 — prompt injection

Diffs and commit messages are untrusted. System prompts instruct the model to treat embedded “ignore previous instructions” comments as data, not commands. Guardrails strip common injection patterns before the model turn. Ref: OWASP Top 10 for LLM Applications (LLM01).

Contact

Security questionnaires / DPA: lixingliangsy@163.com. Privacy details: privacy.html.