Skip to content
Security

Access and data handling

Protect your workspace, understand source permissions and handle security reports without exposing sensitive information.

Protect your accountPermalink to Protect your account

Use an account you control and sign out on shared devices. If a session expires or access is removed, sign in again and select a workspace you still belong to. Do not share a signed-in browser session to give someone temporary access; invite them to the organization with the appropriate role.

Keep source access intentionalPermalink to Keep source access intentional

Authorize the source account and repositories intended for the workspace. Review the consent screen before connecting. Permission to read a repository and permission to create a pull request are different capabilities; available actions also depend on the connected account's source permissions.

A connection can be disconnected from Relane. Restore it through the source authorization flow if you need it again. Disconnecting access is not the same as deleting an existing assessment or report; discuss data removal requirements separately with Relane.

Treat findings and exports as sensitivePermalink to Treat findings and exports as sensitive

  • A report can identify vulnerable code locations and security weaknesses. Share it only with the intended audience.
  • Do not paste credentials, authorization links, private source files or complete reports into public support threads.
  • A notification destination may contain a credential in its address. Relane displays a limited destination identifier after saving, not the complete secret URL.
  • Review downloaded files before forwarding them. An export is a separate copy that remains wherever you store or send it.
  • If a scan identifies an exposed credential, rotate or revoke it at the source. Removing the text from the latest commit alone does not undo exposure.

Security review and data questionsPermalink to Security review and data questions

Use your organization's current agreement for contractual terms, data handling commitments and plan scope. Ask Relane about any retention, deletion, data-location or compliance requirement that is important to your organization before relying on it. A product feature or assessment report is not a certification.

For an access incident, notify your workspace owner and contact security@relane.ai. Describe the affected workspace and the issue without sending credentials. For account or product help, include the relevant page and the non-sensitive error message.