Built to stay SECURE
Security is a top priority for us. You can rely on a platform that treats your intellectual property with the same care you do, while it generates high-quality documentation from your codebase.
What we always do, and NEVER do
Always
- Encrypted token storage (AES-256)
- Data residency in the EU, on servers in Germany
- Read-only access to your repositories
Never
- Keep your code after the analysis
- Train AI models on your code
- Change anything in your repositories
Where your code GOES
Your code only passes through our static analysis. After that, only the results move on.
Your code
Your repository
- Read-only access
- Token stored encrypted
Static analysis
- Separate per customer
- Code deleted right after
The knowledge layer
What we keep
- Goals, flows and documentation, no code
- All data stays in the EU
AI
- Gets the analysis, never your code
- Never used to train AI
What that means in PRACTICE
A closer look at how Smartdoxx handles your code, your tokens and your data.
How is my access token stored?
Access tokens are encrypted with AES-256 as soon as we receive them, and managed through a hardware-backed Key Management Service. They are never accessible in plain text, not even to Smartdoxx staff. A token is only used to open a temporary read-only connection to your repositories, and is discarded after each documentation generation session. Expired or revoked tokens are not stored, and long-lived integrations are rotated on a fixed schedule. Strict least-privilege access, full logging and continuous monitoring protect your authentication data.
Where is my data processed and stored?
Only in the European Union. All processing, handling and storage take place on EU-based infrastructure: our servers are in Germany, and the language models we use also run on servers within the EU. Your data does not leave the region at any stage.
Can Smartdoxx change my code?
No. Smartdoxx connects to your repositories with strictly read-only access. We never write, modify, delete, commit or push anything. The connection is used only to generate your documentation and is limited to the minimum access needed for that.
Do you keep a copy of my code?
No. During the analysis, your code is streamed from your repository into an isolated container, kept separate from other customers and used only for that session. Once it is done, all temporary code data is discarded. No copies, archives or backups of your source code are stored on Smartdoxx infrastructure. What we keep is the knowledge layer: goals, flows and documentation.
Is my code sent to AI?
No. Smartdoxx finds the building blocks of your software and the links between them with static code analysis, without AI. Only the results of that analysis go to the AI, which names goals and journeys and writes the documentation. Your code itself is never sent to an AI model.
Is my code used to train AI models?
Never. Your code is not used to train, improve, retrain or fine-tune any model, and it is not used for any other purpose than generating your documentation. Where subprocessors are involved, they are contractually prohibited from using customer data for model training or any unrelated purpose.
Documentation you can TRUST
See how Smartdoxx keeps your code safe while generating complete, accurate documentation on every release.