SECURITY
Your code stays yours
We built RCode for analysts who cannot send proprietary scripts to a public training corpus.
Data handling
Prompts and pasted code are processed to generate a response and are not used to train foundation models. Chat messages are retained for up to 30 days (configurable via RCODE_RETENTION_DAYS) for abuse prevention and support, then deleted by an automated retention job. Enterprise customers can request shorter retention.
Infrastructure
- TLS in transit via Caddy + Let's Encrypt in production
- Postgres on a private Docker network — not exposed publicly
- Nightly database backups with local retention
- Rate limits on auth and contact endpoints
Enterprise controls
SSO, audit logs, IP allowlists, and VPC deployment are available on request for Enterprise customers. Contact us for a security questionnaire or DPA.