Trust Centre
Trust and security
These are the commitments that do not change with a release, a region or a customer. The specifics that do change, and they change often, live in the documentation, which is maintained continuously rather than restated here.
What is always true
Six things that hold in every engagement
Arrio reads. It does not write.
Repository access is read-only in every deployment model we offer. Arrio measures what has been built and reports on it. It does not modify code, gate merges, or change anything in the systems it reads.
Your source code is not ours to keep.
Arrio is built to measure without retaining your code. What persists after an analysis is the measurement, not the source. Working data is read, classified and discarded.
You choose where your data lives.
We support multiple deployment and security models, chosen to suit your business rather than our convenience: multi-tenant on Arrio infrastructure, or running inside your own cloud so nothing leaves your estate. The choice is agreed before any analysis begins.
You choose the model, and you can bring your own.
Arrio is model-agnostic and works across providers. Organisations that need to can bring their own model and their own key, so analysis stays inside an approved estate. We are tied to no AI vendor, which is rather the point of an independent measure.
We measure the work, never the worker.
The unit of measurement is the output of teams, divisions and vendors. Arrio does not rank individuals, log keystrokes or produce per-developer scorecards. That is a design decision, not a configuration option.
Every agent is governed.
The agents that go deeper on security, architecture and technical debt are sandboxed and audit-trailed, and they read and report rather than act. Findings are verifiable directly against your own repositories, which is what makes them worth having.
Where the detail lives
The documentation, not this page
Certifications, sub-processors, data retention schedules, regions, incident procedures and the technical review pack all change over time. Publishing them here would mean two versions of the truth, and the one on a marketing page is always the one that goes stale. So there is one version, and it is maintained.
If you are evaluating Arrio and need something that is not yet documented, ask rather than assume. Security questions and responsible disclosures reach a founder at david@arrio.ai.
Bring your hardest security question. We would rather answer it now than at contract.