Privacy

When you run an audit, NittiM records the repository URL, the generated report (findings, scores, verdict), and — when you are signed in — your user ID so you can retrieve the report later. Nothing else.

Source code is fetched from GitHub into server memory for the duration of the analysis. It is never written to disk, never stored in our database, and never retained after the audit completes. The only thing we persist is the report we generated.

If you supply a GitHub token to audit a private repository, that token is used once to call the GitHub API for the source snapshot. It is not stored, not logged, and not passed to any third party. It is discarded as soon as the snapshot is downloaded.

• Audit reportFindings, scores, verdict, repo name — stored in our database.
• Source codeNever stored. In-memory only during analysis.
• GitHub tokensNever stored.
• Your email / identityOnly if you sign in via GitHub OAuth.

Reports generated from a private repository are themselves private. They are only accessible to the account that requested the audit (or members of that account's organization). Anonymous viewers receive no information about a private report's existence.

NittiM does not use your source code or your audit report to train any model. The source code never leaves the analysis pipeline. The report is stored solely to make it retrievable by the person who requested it.

Reports remain accessible until you delete them. You can delete any report you own via the API:

DELETE /api/v1/audit/<id>

After deletion, a 30-day grace window begins. At the end of the window the row is permanently and irrecoverably purged from our database on the next nightly retention pass. During the grace window the report is invisible to all callers; it is not surfaced in any read path.

Reports are stored in Supabase (managed Postgres, us-east-1). Audit reasoning is performed by Anthropic's Claude API — the source snapshot is sent to Anthropic for this purpose and is subject to Anthropic's privacy policy. NittiM does not sell or share your data with any other third party.

Questions about your data? Reach us through the NittiM homepage.