siGit Trust Center

Where siGit runs, who else touches your data, and how to reach us about security or privacy.

Who we are

• OperatorPT Sigit Mitra Bangun
• ServicesiGit — Git hosting built for AI workflows

Where your data lives

siGit runs on a single server in Helsinki, Finland, rented from Hetzner. Your repositories, the database, and background jobs all live on that machine. Repository contents are stored as ordinary bare Git repositories on its disk, not in third-party object storage.

Subprocessors

Third parties that may process customer data on our behalf.

• Hetzner Online GmbH Finland
  The server siGit runs on, including repository storage and the database.
• smbCloud (Splitfire AB) EU
  Accounts and sign-in, including password storage and Continue with GitHub. Also transactional email and deployment tooling.
• Onde Cloud (Onde Inference) EU
  Hosted AI inference. Prompts you send to the cloud models, and the code context attached to them, are forwarded to Onde Cloud. Running a local model instead keeps this on your own machine.
• Stripe Ireland / US
  Payments and subscriptions. We never store card numbers.
• GitHub US
  Two optional integrations you choose to enable: importing a repository, and the app that posts automated pull request reviews.
• Brave Search US
  Runs the web search tool when an agent looks something up. Only the search query is sent.
• UI Avatars US
  Generates the fallback profile picture for accounts without an uploaded avatar. Receives the display name it draws initials from.

How we work

• TLS on every public endpoint, certificates renewed automatically.
• Passwords are held by smbCloud, not by siGit. API access uses OAuth 2.0 tokens.
• Your repositories are stored on our own disk, not handed to an object storage vendor.
• Local models run entirely on your machine, with no prompt leaving it.
• Access to production is limited to company staff over SSH keys.

What we do not claim

siGit is built by a very small team. We hold no SOC 2 or ISO 27001 certification today, and we would rather say so than imply otherwise. Ask us directly if you need details for a vendor review.

Report a problem

Found a vulnerability, or have a privacy question? Email us and we will reply. Please do not open a public issue for security reports.

support[at]sigit[dot]si · vulnerability reports
privacy[at]sigit[dot]si · data access and erasure
legal[at]sigit[dot]si · terms and contracts

Last updated 27 July 2026.

PT Sigit Mitra Bangun · siGit · Privacy Policy · Terms of Use