Your code stays yours. Your wording stays traceable.

GitHub access runs through a read-scoped App installation. Hosting connections read project names, addresses and env var names — never values, never your source.

ZIP files are read once, in the browser where possible, and thrown away. What stays behind is a short list of service names — not your work.

Everything encrypted in transit and at rest, provider tokens sealed server-side and never exposed to the browser, strict internal access limits, and full activity logging.

Every clause maps to a service we detect in your code. Nothing is generated on the fly, and we record which version of which clause you received.

It identifies which services your product uses and writes the plain-English explanations. It cannot write the clauses themselves — that's prevented by design.

Every change, approval, and publication is logged with who did it and when, and you can download the lot.