CodeRabbit Inc - Trust Center - Security & Privacy

CodeRabbit is an AI-powered code reviewer that delivers context-aware feedback on pull requests within minutes, reducing the time and effort needed for manual code reviews. It provides a fresh perspective and catches issues that are often missed, enhancing the overall review quality.

CodeRabbit Inc recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners.

As a product, we understand the importance in providing clear information about our security practices, tools, resources and responsibilities within CodeRabbit Inc so that our customers can feel confident in choosing us as a trusted provider.

This Security Posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve.

Compliances (4)

SOC 2

Compliant

GDPR

Compliant

ISO 27001

In progress

ISO 42001 v2023

In progress

Controls

Continuously monitored

Product security (2)

Production System User Review

Situational Awareness For Incidents

Data security (13)

Termination of Employment

Production Databases Access Restriction

Multi-factor Authentication

Network security (8)

Impact analysis

Limit Network Connections

External System Connections

App security (7)

Conspicuous Link To Privacy Notice

Secure system modification

Approval of Changes

Endpoint security (5)

Malicious Code Protection (Anti-Malware)

Full Device or Container-based Encryption

Endpoint Security Validation

Corporate security (35)

Code of Business Conduct

Organizational Structure

Roles & Responsibilities

Resources (49)

Data Protection Policy

Data Protection Policy outlines the measures to safeguard personal information and comply with data protection laws, business requirements, local regulations, and contractual obligations.

Endpoint Security Policy

Endpoint Security Policy outlines measures to protect an organization's production systems and critical data from unauthorized access via information systems accessed by internal and external users.

Data Breach Notification Policy

Data Breach Notification Policy outlines procedures for promptly notifying individuals and authorities in the event of a data breach.