Concept

Where your data lives, and what leaves your repository

Records live in Corpole in the EU. Your code stays with you.

For: Security & compliance, Evaluator

Facts

  • Data is stored in PostgreSQL in the EU (Frankfurt); the application runs in Frankfurt.
  • Every agent connection is limited to one project and is read-only unless the propose permission is granted.
  • Tokens are stored only as SHA-256 hashes; personal and service tokens expire and can be revoked, sign-in connections can be disconnected.
  • Agents cannot change or delete records; what they propose stays a Draft until a person reviews it.
  • Corpole does not read your repository. What reaches it is what agents write (records, proposals, test results, links) and pull request details from a connected GitHub repository.
  • Optional AI help in the setup wizard sends the project brief and uploaded documents to Anthropic's API; nothing is saved without your confirmation.
  • Secret-looking values are masked in everything an agent sends.

KB-SD-01