Security & Privacy

Your code is your most valuable asset. Anchorscape is built with a zero-retention, ephemeral architecture.

Zero-Retention Processing

Code is processed in ephemeral memory and purged immediately after analysis. We never write your source code to disk. Only the analysis results are saved.

Ephemeral Processing

Anchorscape processes your code in ephemeral instances. This means your code is analyzed in isolated, temporary environments that are destroyed immediately after processing.

  • •Code is streamed directly into memory — never written to disk
  • •Processing happens in isolated containers with no persistent storage
  • •All data is purged immediately after your scan completes
  • •No code remains on our servers after the session ends

What We Store

We store metadata and results only:

  • •Project name and scan timestamp
  • •The generated report (findings, scores, recommendations)
  • •Your user account details
  • •Usage statistics for billing purposes

What We DO NOT Store

We NEVER permanently store your source code:

  1. 1Code is streamed into ephemeral memory
  2. 2AI models process the code in isolated containers
  3. 3Code is immediately flushed from memory after processing
  4. 4No files are written to persistent storage

Note: If you opt-in to the full scan → fix → deploy journey for ZIP uploads, your code is encrypted and stored temporarily (max 24 hours) to enable the workflow, then automatically wiped upon completion or expiration.

Static Analysis Only

Anchorscape is a static analysis tool. We do not execute your code. There is no risk of side effects, database calls, or external network requests triggering from our analysis.

Responsible Disclosure

If you believe you have found a vulnerability in Anchorscape, please email [email protected]