Built for
enterprise trust.
Grassion analyzes engineering workflow metadata. We never read or store your source code.
Grassion never reads your source code. We only read PR metadata visible in GitHub — titles, commit messages, and timestamps. No code is stored. Ever.
What Grassion reads
- ✓PR titles and descriptions
- ✓Commit message text (not diff or code)
- ✓Merge timestamps and dates
- ✓Author GitHub usernames (public data)
- ✓Review counts and approval status
- ✓PR open / close / merge events
What Grassion never touches
- ✗Your source code or file contents
- ✗Secrets, API keys, or environment variables
- ✗Private keys or credentials of any kind
- ✗Internal Slack or email communications
- ✗Developer personal data beyond GitHub profile
- ✗Code diffs or actual implementation details
Exact GitHub permissions we request
Your GitHub username and public profile. Same as any GitHub OAuth app.
Read PR metadata, commit messages, and review outcomes. Cannot write, merge, or modify anything.
Verify organisation membership. Cannot modify org settings or member permissions.
Where your data lives
Your data, your control
Delete all your data at any time from Settings → Danger Zone. We permanently remove all records within 24 hours. No backups retained. You can also uninstall the GitHub App at any time to stop all data collection immediately.