Security

• • OllyGarden, Inc. has completed a SOC 2® Type II examination covering security, availability, and confidentiality. Customers and prospects can request the report under NDA.
• • The core platform runs in Google Cloud in the EU (Netherlands) by default. The managed Rose service uses the locations described below.
• • Data is encrypted in transit with TLS and at rest, and telemetry samples are encrypted with a separate key for each organization.
• • Production access is disabled by default, granted just in time, and protected by multi-factor authentication.
• • We run penetration tests at least once a year.

Our Data Protection Policy describes these controls in detail, and our subprocessor list names every third party that processes customer data. For security questionnaires, email [email protected].

The managed Rose GitHub App runs entirely on OllyGarden-managed infrastructure. Each execution makes a full clone at the exact commit being analyzed inside a dedicated E2B micro-VM. The checkout and build artifacts are destroyed with the sandbox. The sandbox receives credential placeholders; an egress proxy attaches short-lived credentials only for approved services. It has general outbound internet access so repository build and test scripts can install dependencies and read public documentation.

Rose sends the file contents, search results, and command output selected during an analysis through OpenRouter to OpenAI and Anthropic models. These providers do not use inputs or outputs to train their models by default, but standard API retention may apply for up to 30 days. Zero-data-retention routing and EU-only processing are separate Enterprise add-ons available on request. The EU-only configuration covers AI processing, managed sandboxes, storage, and telemetry.

Rose records operational telemetry through our collector in Grafana Cloud and Datadog EU. It can include secret-redacted model and tool inputs and outputs, truncated to 4 KB per item. It can therefore contain code excerpts. Telemetry collection can be disabled on request. We do not use customer code or data to train models on any plan. See our Privacy Policy for retention details and our subprocessor list for provider locations.

The Rose CLI runs in the customer's own automation environment. It is stateless, does not persist findings or repository data on OllyGarden's side, and emits OpenTelemetry only when the customer explicitly configures it.