Security

Enterprise-Ready
Security

Built for the most security-conscious teams. SOC 2 compliant with minimal permissions and enterprise-grade protections.

Compliance & Certifications

SOC 2

SOC 2 Type II

Independently audited for security. Annual audits ensure ongoing compliance.

View Trust Center →
SSO

Enterprise SSO

Coming Soon

SAML 2.0 and OIDC support for seamless integration with your identity provider.

Minimal Permissions

Changebot only requests read-only access to what it needs. No write access to your code.

Read-Only Access

Changebot never writes to your repositories. We read commits, PRs, and issues—nothing more.

Scoped Permissions

Only the repositories you explicitly authorize. No organization-wide access required.

Easy Revocation

Revoke access at any time through your provider's settings. Instant disconnection.

Audit Logging

Complete audit trail of all data access. Know exactly what Changebot reads and when.

Infrastructure Security

Encrypted at Rest

All data encrypted using AES-256 encryption at rest.

Encrypted in Transit

TLS 1.3 for all data in transit. No exceptions.

Cloud Infrastructure

Hosted on SOC 2 compliant cloud providers with 99.9% uptime SLA.

Regular Backups

Automated backups with point-in-time recovery capabilities.

DDoS Protection

Enterprise-grade DDoS mitigation at the edge.

Penetration Testing

Regular third-party penetration testing and vulnerability assessments.

Questions About Security?

Our team is happy to discuss your security requirements and provide documentation.

Talk to Us →