Your code is your most valuable asset. We protect it.
Security and privacy aren't afterthoughts - they're fundamental to how Dockr is built. Here's exactly what we do to protect your source code and your team's data.
Your code is never used to train AI models - ours or anyone else's.
When Dockr analyses your repository, it reads your code to generate documentation. That code is encrypted at rest and in transit (TLS 1.3). It is never shared with third parties for training purposes, never used to improve our own models, and you can delete it at any time. Your intellectual property stays yours.
Security
Encryption at rest & in transit
All stored data is encrypted at rest. TLS 1.3 for all network communication. No plaintext storage. Encryption keys are managed separately from the data they protect.
Secure token management
OAuth 2.0 for Git authentication. Tokens are encrypted and rotate automatically. We never store your Git password. Tokens can be revoked at any time from your Git provider settings.
CSRF protection
Cross-Site Request Forgery prevention on all endpoints with token-based validation. Protects against common web attacks that attempt to perform actions on your behalf.
Comprehensive audit logging
Every action logged with timestamp and user identity. Immutable audit trail showing who accessed what and when. Compliance-ready for security reviews and incident forensics.
Regular security audits
Third-party penetration testing, vulnerability scanning, code security reviews, and dependency updates. We verify security - not just build for it.
Data isolation between organisations
Each organisation gets its own dedicated storage volume and separate encryption keys. Your data never shares disk space, a database partition, or application state with another customer.
Privacy
Your code stays yours
We process your code to generate documentation - we don't own it. You can disconnect a repository or delete your account at any time, and your data is removed within 30 days.
Never used for AI training
Your code never trains our AI models or any third-party model. Each analysis run is isolated. Your proprietary algorithms, business logic, and trade secrets are never learned from - only read to produce documentation for you.
Granular access controls
Role-based permissions at the organisation, team, and repository level. Admin, Editor, and Viewer roles. Audit exactly who has access to what - and revoke it instantly.
SOC 2 Type II - in progress
We are actively working toward SOC 2 Type II certification. GDPR-compliant for EU customers. CCPA-compliant for California. Data Processing Agreements (DPA) available on request.
Transparent data handling
No hidden data collection. No selling data to third parties. No advertising use. Our Privacy Policy documents exactly what we collect and why.
Private cloud deployment
Enterprise option. Deploy Dockr in your own AWS, Azure, GCP, or on-premises infrastructure. Your code never leaves your secure environment.
Common questions
Can Dockr employees see my source code?
What happens to my code if I cancel my subscription?
What if Dockr is breached?
How do you handle security vulnerabilities in Dockr itself?
Can I control where my data is stored geographically?
Have a security question?
Our team responds to all security inquiries within 1 business day.