### Safe, Secure, & _Enterprise-Ready_

Everything in ByteRover is designed to keep your work safe, compliant, and under your control.

#### Enterprise-Grade Security

Peace of mind-as-a-service. ByteRover is built with security as a first principle: encryption by default, strict access controls, transparent auditing, and 24/7 monitoring.

##### **Product Security**

- Encryption with TLS 1.2+ in transit and AES-256 at rest
- Role-based access control with fine-grained permissions
- Audit logs recording every action for compliance and visibility
- Workspace isolation to ensure strict data separation

##### **Operational Security**

- Continuous monitoring with Grafana, Prometheus, and Loki
- Cloudflare WAF for real-time threat and DDoS protection
- Automated dependency and container vulnerability scanning
- 24/7 incident response with under 1h notification commitment

#### **Privacy & Data Lifecycle**

- GDPR-aligned practices

GDPR-aligned practices

- Secure deletion
    - NIST 800-88 compliant erasure with customer deletion certificates
- Retention
    - active data: +30 days, backups: +90 days
- Sub-processors
    - limited, vetted, and disclosed with 30-day customer notice

#### **Reliability**

- 99.9% uptime SLA backed by enterprise-grade infrastructure
- < 200ms response time measured at the 95th percentile
- < 4h recovery time objective ensuring minimal disruption in case of incident

### Build with _Confidence_

Your code and knowledge stay yours. Always encrypted, always under your control. ByteRover never claims ownership of customer data and provides indemnification against third-party claims.