Security

Data we hold, and data we do not

We store account and identity references, team and seat structure, entitlement and subscription metadata, and Proof Portfolio records (references and scores, not code). We do not store your source code. Repository intelligence and analysis run in the products that own them (for example OpenThunder Local runs on your machine).

Your source code is never uploaded to Workspace and is never used to train AI models, anywhere in the Skills Tech platform. This holds across every product, including any AI features.

Encryption

Data is encrypted in transit with TLS across all of our surfaces and APIs. Data at rest is encrypted by our infrastructure providers. Secrets and API keys are held in provider-managed secret stores, never in source control, and are scoped to the minimum required.

Authentication and access

Sign-in uses the shared Skills Tech identity provider, keyed on a single account across every Skills Tech product. Server-side data access is authorized per request against the signed-in user, and cross-service reads are authenticated with rotating server-to-server secrets. Enterprise customers can enforce SSO and SCIM through the self-serve SSO console.

Team data is coverage, not surveillance

Team dashboards are repo-centric by design. They show system coverage, ownership, and single-points-of-knowledge, never a ranking of individuals. Proof is opt-in and user-published: a person chooses what, if anything, becomes visible to their team or the public.

Payments

Skills Tech Talk, LLC is the merchant of record. Payments are processed by our payment processor. We do not receive or store full payment card numbers.

Infrastructure and sub-processors

We run on established cloud infrastructure with encrypted storage, managed backups, and network isolation. The third parties that process data on our behalf are listed on our sub-processors page.

Certifications

We describe here only practices we actually follow, and we claim no certification we do not hold. If and when we complete a formal audit, we will state it on this page with the report available under NDA on request.

Reporting a vulnerability

If you believe you have found a security issue, please email support@skillstechtalk.com with details and steps to reproduce. We will acknowledge your report and work with you on a resolution. Please do not publicly disclose an issue until we have had a reasonable opportunity to address it.