Data processing addendum

This addendum is between the customer and Cerebe LLC. It applies where the customer is the controller of personal data that Cerebe processes to provide the service, and Cerebe is the processor. It is part of the terms.

What is processed

• Subject. Reviewing the customer's pull requests and posting the check.
• Duration. For as long as the customer uses the service, and after that as the security page describes. Retention and deletion controls are on the roadmap.
• People. The customer's users, and people named in repository content sent for a review.
• Data. Account identity (name, email, GitHub identity). Repository content sent for a review. The review record, which is the findings and the verdict.

Instructions

Cerebe processes that data to provide the service the terms and the security page describe, and not for a purpose this addendum does not name.

Subprocessors

The list is the subprocessor page. It names the model providers. Cerebe updates that page when a company is added or removed. The page is the notice of the change.

Security and place

The security page states how code, prompts, and derived data are handled, the permissions the GitHub App is granted, and what the check does when a review cannot finish.

Processing is in the United States, by the companies the subprocessor page names.

Law

This addendum is governed by the laws of the State of Texas.

Patrick Jean, for Cerebe LLC.
701 Brazos Street, Austin, TX 78701