Data handling

The short version: Veridu is a code-review tool. We fetch the pull request you point us at, run it through the AI reviewers you selected, and return the reconciled findings. We keep as little of your code as possible and give you a delete switch.

What we store

• The PR URL you submitted.
• The diff we fetched from GitHub.
• The prompts we sent to reviewer models.
• The raw responses those models returned.
• The reconciled result, plus your adjudications on individual findings.

What we don't store

• The full repository - we only ever fetch the PR patch.
• Your personal GitHub token, if you provided one for a private repo.
• Anything after you delete your account.

Who sees it

Prompts + diffs are sent to the reviewer models you selected - OpenAI and Anthropic today. Neither vendor uses API traffic for training under their published policies.

Where it lives

AWS us-east-1. RDS MySQL. TLS in transit, encrypted at rest.

Deletion

Delete individual reviews yourself from the reviews list, any time.

For your whole account, use Billing → Danger zone, which emails us a deletion request. We process it within one business day and remove everything — reviews, diffs, prompts, model responses and adjudications. Self-service deletion is coming; until it lands the request is handled by hand, and the one-business-day commitment is what we hold ourselves to.

Who operates Veridu

Veridu is operated by Presentr. Payments are processed by Stripe and may appear on your statement under that name. Questions about your data, or a deletion request: hello@veridu.io.