Where it runs
Web and API live on Railway, in isolated containers. Secrets stay in the environment — not in the repo.
Trust
We only see what you let us see
Fair question before any AI touches production code. Here’s what we run, who we call, and how a review stays scoped to the PR you opened.
Powered by
OpenAI
Anthropic
GitHub
GitLab
Railway
GitHub App
You choose which repos. Tokens are short-lived. We don’t ask for a personal password to your org.
AI providers
Reviews go through OpenAI and Anthropic. We send the diff and what’s needed for that review — not a dump of your company.
Encryption
TLS on every browser and webhook call. Keys live in a managed secret store.
Uptime
We watch webhook delivery and API latency. If a review doesn’t post, we want to know before you do.
What we keep
The review job reads the diff in memory. We store workspace metadata, usage, and messages you send us. Ask if you need a DPA.
At a glance
- Hosts
- Railway · managed TLS
- Integrations
- GitHub App + webhooks
- Models
- OpenAI · Anthropic (routed)
- Status
- Synthetic checks + delivery logs
In short
We read the diff for that pull request. We are not scraping your entire org. What we store is workspace metadata, usage, and anything you send us through the product.
- Least privilege. GitHub App and GitLab OAuth scopes limited to review and fix workflows.
- Encryption in transit. TLS for browser, webhook, and provider API traffic.
- No training on your code. Prompts use your diff and metadata only for that review request.
- Enterprise questions. DPA and security questionnaires via contact.
Product changes are published on our changelog.
Security FAQ
Questions security and engineering teams actually send us.
How does MergeGuard handle customer data?
We only see the repos you connect. Traffic is TLS. Secrets live in a managed store. We read the diff for that review — not your whole org “just in case.” Email us if you need a questionnaire or a DPA.
What data does MergeGuard send to AI providers?
The pull request diff and the metadata needed to write the review. Not your entire codebase. Each job is scoped to that PR or merge request.
How are GitHub permissions scoped?
It’s the official GitHub App. You choose which repositories to install on. You can revoke access anytime.