Your code stays private.
MAVENS checks software with minimal data access, passwordless sign-in and a core service operated in Germany.
Local and remote reviews have different data flows
MAVENS Local scans the selected local project. Submitted results can contain file paths and finding locations. An explicitly requested remote repository review processes source code in the review environment. Check the granted scope and your AI tool settings before authorizing access.
Sign in without passwords
After confirming your email address, you set up a passkey with Face ID, Touch ID or Windows Hello. Passkeys use your device or passkey provider and may be synchronized by that provider. MAVENS does not receive the private key.
Hosted in Germany
The core service and self-hosted Supabase run on MAVENS infrastructure at Contabo in Germany. No US cloud is used in the core service. Processing is subject to the GDPR.
Subprocessors
We limit external service providers to the necessary purpose and keep the list here up to date. We answer questions about processing at hamburg@mavens.de.
- Contabo GmbH: hosting, Germany
- Resend (Plus Five Five, Inc.): transactional email, processing in the United States under a DPA and the EU Standard Contractual Clauses; additionally the EU-U.S. Data Privacy Framework