Security
Your code stays yours
Security and privacy are foundational to Arshas. Here is how we protect your source code and data at every layer.
Privacy mode by default
With privacy mode on, your code is never stored on our servers and is never used to train models.
Encryption everywhere
All data is encrypted in transit with TLS 1.3 and at rest with AES-256.
SSO & SCIM
SAML single sign-on and SCIM provisioning for Business and Enterprise teams.
Zero data retention
Enterprise plans can enforce zero retention so prompts and completions are discarded immediately.
SOC 2 Type II
Independently audited controls covering security, availability, and confidentiality.
Least-privilege access
Internal access is tightly scoped, logged, and reviewed. Production access requires hardware keys.
Compliance & certifications
SOC 2 Type IIGDPRCCPAISO 27001
Need our SOC 2 report or have a security question? Reach our team at security@arshas.dev.