Built for enterprise security and privacy
Agents read your code in an isolated environment, push to a branch, and leave a record of every step. anturno never trains on your code.
Preparing for SOC 2 and ISO 27001
No auditor is engaged yet, and we hold no certifications.
Controls on by default
Isolated runs, repository-scoped tokens, encrypted secrets and an audit log.
Not used for training
anturno never trains a model on your content.
The status of each framework is on the trust page.
The controls that make the answer yes
Every one of these is on for every workspace. A DPA is available on request.
Isolated runs
Each session runs in its own isolated environment. Its disk is kept between the session’s runs so work can resume, and deleted when the work ends.
Least privilege
Each run gets a short-lived token for one repository, with permission to write code and pull requests only.
Model keys stay out
Model keys never enter the session. Saved secrets are encrypted per workspace. Tokens and secret values are redacted from logs.
Audit everything
Every run keeps a trace of each step, tool call and test. Member, sign-in and token changes, and every API call made with a token, are in an audit log you can read over the API.
Run on your machines
Pair a machine and sessions run on it. You can limit outbound network access to the hosts you list.
Model choice
Bring your own key or subscription. Your agreement with the provider decides what it keeps.
Frequently asked questions
The questions a security review opens with. Write to us for anything this page does not answer.
Into the session’s own isolated environment. Its disk is kept between the session’s runs so work can resume, and deleted when the work ends. On a paired device, the checkout stays on your machine.
Partly. A paired device keeps the checkout and the commands on your machine. You can also run the product in your own cloud; ask us. Hosted data stays in the United States. The subprocessor list names who touches it.
Push to a branch and open a pull request. Each run’s token covers one repository, can read and write code and pull requests only, and is short-lived. anturno never merges on its own.