# Know what you are trusting with your code.

> Understand public previews, saved repository analysis, provider keys and the limits of automated security checks in PrompterJack.

Canonical page: https://prompterjack.com/trust

## Public preview and saved analysis are different

The public preview processes a public repository to produce a limited health summary. Signed-in analysis retains analyzed files and a codebase profile to support subsequent workflows. Do not assume that all analysis happens only in your browser.

## API keys can pass through the service

Bring-your-own-key requests can be processed by the backend. The codebase also supports encrypted saved-key handling using AES-GCM. Availability depends on the feature and configuration. Do not put keys in repository URLs, prompts, exports or public templates.

## Repository access is explicit

Private repositories require authorization. Choose the repositories granted to the GitHub App, inspect the permissions requested, and review proposed file changes. Disconnect or revoke access when you no longer need an integration.

## Deletion and retention need a clear expectation

Saved analysis is server-side data. Use the account and codebase controls to manage it, and contact support for questions about retained artifacts, backups or deletion completion. See the privacy policy for the applicable terms; this page is a product overview.

## Security tools support a review

Scores, attack tests, rule checks and framework mappings do not certify your system or guarantee that it is free from vulnerabilities. Validate changes in your environment and seek specialist review when the consequences require it.

## Enterprise features must be verified

SSO, audit-log and compliance-evidence features shown as roadmap items are not commitments of current availability. Confirm requirements with the team before making a purchasing or deployment decision.

## Can I upload credentials or sensitive customer data for a scan?

Remove secrets and unnecessary personal or customer data first. Grant only the access needed for the task and review the service terms and provider requirements for your intended data.

## Next step

[Ask a security question](https://prompterjack.com/contact?topic=security)