Veridu
Privacy

Data handling

The short version: Veridu is a code-review tool. We fetch the pull request you point us at, run it through the AI reviewers you selected, and return the reconciled findings. We keep as little of your code as possible and give you a delete switch.

What we store

  • The PR URL you submitted.
  • The diff we fetched from GitHub.
  • The prompts we sent to reviewer models.
  • The raw responses those models returned.
  • The reconciled result, plus your adjudications on individual findings.

What we don't store

  • The full repository - we only ever fetch the PR patch.
  • Your personal GitHub token, if you provided one for a private repo.
  • Anything after you delete your account.

Checks from your coding agent

When your agent calls verify_change (through the Veridu MCP server or the Claude Code plugin), it sends the diff of its change and the full content of the files it chose to send. Nothing else from your machine or repository is read. The check runs in an isolated sandbox in AWS, and the reviewer prompts go to OpenAI and Anthropic as described below.

  • The diff and files your agent sent are deleted 7 days after the check finishes.
  • The result is kept with the check: the verdict and the findings, which can quote lines of your code. It is removed when you delete your account.
  • Signing in from your agent uses OAuth in your browser (GitHub, Google or an emailed code; Veridu has no passwords). Veridu stores only a hash of the token your agent holds.

Who sees it

Prompts + diffs are sent to the reviewer models you selected - OpenAI and Anthropic today. Neither vendor uses API traffic for training under their published policies.

Reviews of public repositories are public: anyone with the review's link, which Veridu also posts on the pull request, can read its verdict and findings without signing in. That page never shows your account, costs, model telemetry, raw model output or your adjudications, and it stops working if the repository becomes private. Reviews of private repositories are visible only to you and your designated collaborators.

Where it lives

AWS us-east-1. RDS MySQL. TLS in transit, encrypted at rest.

Deletion

Delete individual reviews yourself from the reviews list, any time.

For your whole account, use Billing → Danger zone, which emails us a deletion request. We process it within one business day and remove everything — reviews, diffs, prompts, model responses and adjudications. Self-service deletion is coming; until it lands the request is handled by hand, and the one-business-day commitment is what we hold ourselves to.

Who operates Veridu

Veridu is operated by T3 Interactive LLC, which also makes Presentr. Payments are processed by Stripe; your card statement shows VERIDU, and receipts may name Presentr or T3 Interactive LLC. Questions about your data, or a deletion request: hello@veridu.io.