Trust & data
Useful evidence, within a clear boundary.
What is collected, why, and who can see it: agreed before any data flows.
Pre-launch. Demo figures are synthetic.Capability status
Intended data boundary
Design commitmentStandard data contract · Locally processed, allow-listed metadata
Approved metadata
Crosses the line
- Usage counters, model, and timestamps
- Minimum approved identity mappings
- Repository, commit, and PR identifiers
- Delivery states and work relationships
- Device health and collection coverage
Excluded from the standard contract
Stays out
- Prompts, responses, and reasoning
- Source text and raw diffs
- Tool arguments and outputs
- Native transcripts and databases
- Provider credentials and configuration files
Metadata can still be sensitive. Repository identities, work timestamps, and spending require appropriate access, retention, and employee transparency.
Our direction
Deliberately limited collection.
Symentrio is built around locally processed, allow-listed metadata. Prompts, responses, source text and raw diffs are excluded from the standard contract.
These are design commitments, verified with you before a pilot. This page is not a certification or compliance claim.
People need context, too
Reports about teams, not leaderboards.
Developers can see their own records, add context and request corrections. Individual drill-down needs explicit permission.
- 01
Collect with a purpose
Fields, repositories and sources are agreed before data flows.
- 02
Keep access explicit
Who can see named evidence is a decision, not a default.
- 03
Make the limits inspectable
Payloads, coverage, retention and deletion are open to review.
Before a pilot
Straight answers.
Is Symentrio SOC 2 certified?
No, and we don’t claim to be. Certification, hosting and operational requirements are discussed directly during qualification, with current evidence provided for review.
Can security review what is collected?
Yes. The pilot process includes the field inventory, sample outbound payloads, a data-flow diagram and permission requirements. Shipped behavior is verified before customer data flows.
What about retention and deletion?
Retention, export and deletion are part of the pilot review. The intended policy minimizes detailed evidence retention and excludes raw content. Exact terms are confirmed for each engagement.
Symentrio
See the work behind
your AI spend.
Start with one team and the coding tools your developers already use.
Talk to usA scoped pilot: usage, costs and delivery evidence.