Access
You choose what the agents see. Submit only code that you own or are authorized to share. You connect repositories through GitHub, private repositories included, or through the API with an Account API key. Keep your API keys confidential, and tell us at support@zerocool.ai if you suspect one is compromised.
Processing
Our cloud infrastructure and our AI model providers process your code during an audit. They process it only to provide, secure, support and administer the service.
Retention
- We do not keep a complete repository or a standalone copy of your source code after the audit is complete.
- Findings and reports keep only the short code excerpts needed to explain a finding.
- We keep findings, reports, repository metadata, audit configuration, usage and API logs, and billing records as long as needed to provide the service.
Training
We do not use your source code to train or fine-tune models for use across customers unless you agree to it in writing. We do not allow our providers to train on it for their own purposes unless you expressly opt in.
Providers
The providers that process your code, such as our cloud host and our AI model providers, are listed on the subprocessors page.
Reports
Each finding gives your engineers the root cause, the impact, the fix and an exploit test that proves it. You own the findings and reports delivered to you, and you can publish them.
Contact
To report a vulnerability in Zero Cool, write to security@zerocool.ai. For questions about code handling or an audit, write to sales@zerocool.ai. For the full terms, read the Terms of Service and the Privacy Policy.