Security
Security at Savio
Savio is built for teams that handle sensitive codebases and proprietary systems. Security is foundational, not an afterthought.
Tenant isolation
Every organization's data — systems, sources, models, claims, and feedback — is logically isolated. Cross-tenant data access is architecturally prevented.
Audit logging
Sensitive actions are logged with actor, timestamp, and context. Source connections, sync triggers, system changes, and configuration updates are all auditable.
Credential security
Connector credentials are encrypted at rest using KMS-backed encryption. Secrets are never stored in plaintext or exposed in API responses.
Infrastructure
Savio runs on managed infrastructure with encrypted storage, network isolation, and automated patching. No customer data is used for model training.
Access controls
Role-based access controls scope what each team member can see and do. Enterprise plans include SAML SSO and fine-grained permission management.
Data boundaries
Savio only accesses the sources you explicitly connect. Data retention and deletion controls let you manage what Savio knows and for how long.
How Savio handles data
What data does Savio access?
Savio only accesses the sources you explicitly connect: GitHub repositories, Jira projects, Notion workspaces, Confluence spaces, and any web URLs you provide. It reads code, documentation, tickets, pull requests, and their metadata to build the system model.
How is data stored?
Source content is chunked, embedded, and stored in a PostgreSQL database with pgvector. All storage is encrypted at rest. System models, claims, and feedback are stored alongside the source data with full provenance tracking.
Is data used for training?
No. Customer data is never used to train or fine-tune any model. Savio uses third-party LLM providers for inference only, with no data retention agreements where available.
Can I delete my data?
Yes. You can disconnect sources, delete systems, and remove organization data. Retention policies and deletion controls are available to manage what Savio retains and for how long.
Enterprise security
For teams with advanced security and compliance requirements.
Questions about security?
We're happy to walk through our security posture, answer compliance questions, or discuss enterprise deployment options.