> ## Documentation Index
> Fetch the complete documentation index at: https://docs.enclave.ai/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Enclave in these docs is the code and cloud security platform at enclave.ai. It is not Open Enclave, Intel SGX or other hardware enclaves, or enclave.gg.
> People use Enclave in the web app at https://app.enclave.ai or the desktop app. These docs describe no public Enclave API or CLI, so don't invent endpoints, commands, or config files.
> Connecting an integration needs a person to sign in and approve access in a browser. Tell the user the exact step to take instead of saying you completed it.

# Security at Enclave

> How Enclave protects your code, cloud, and data: encryption, compliance, sandboxes, data retention, and integration access.

Enclave reads your code and cloud to find real security issues, so we hold ourselves to the same bar. For reports and policies, see the [Trust Center](https://trust.enclave.ai).

## Security

> [accordion] Encryption
>
> Data is encrypted in transit with TLS 1.2 or later, and at rest with AES-256, using industry-standard key management.

> [accordion] Compliance
>
> Enclave is SOC 2 compliant. See the [Trust Center](https://trust.enclave.ai) for our report and policies.

> [accordion] Isolated sandboxes
>
> Enclave runs code analysis in isolated sandboxes. A Research sandbox starts without network access. To keep repository checkouts inside your own AWS account, use [BYOC](https://docs.enclave.ai/deployment/byoc.md).

## Privacy and data

> [accordion] Data retention
>
> Enclave keeps your data only as long as it needs to provide the service, following industry best practices. You can delete Research sessions at any time. See our [privacy policy](https://enclave.ai/legal/privacy-policy).

> [accordion] Connecting GitHub
>
> The GitHub app requests read access to code, pull requests, and webhook events. Enclave never pushes commits and never reads repository secrets. See [GitHub](https://docs.enclave.ai/integrations/github.md).

> [accordion] Connecting your cloud
>
> Cloud access is read-only. On AWS, Enclave assumes the `EnclaveScanner` role, which only Enclave can assume, with an external ID for your organization. See [AWS](https://docs.enclave.ai/integrations/aws.md).

> [accordion] Connecting Slack
>
> Replies in a channel are visible to everyone in it. Ask sensitive questions in a private channel or a direct message. See [Slack](https://docs.enclave.ai/integrations/slack.md#privacy).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.