Security
Packrat keeps your telemetry data and its agent reads it. This page says how that data is kept apart, who can reach it, and what leaves Packrat.
Last updated October 13, 2026.
Your data stays in your org
Everything an org sends is written under one folder in object storage, named by the org's id. An API key belongs to one org, and a query made with it can read that org's folder and no other. There is no shared table that holds two customers' telemetry.
Encryption
- In transit. Every Packrat host answers over HTTPS only, with HSTS. Telemetry, queries and the web app all use TLS.
- At rest. Telemetry is stored in Cloudflare R2, which encrypts every object with AES-256.
Keys
Packrat has two kinds of key, so that a leaked one does as little as possible:
- An ingest key can only send data. It cannot read anything, which is why it is safe in a web page's source.
- An API key reads your org's data. Treat it as a secret.
Packrat stores a SHA-256 digest of a key, not the key.
What Packrat's agent sends to a model
Packrat's agent is what verifies your code changes in production. When it is on for an app, it reads that app's telemetry and sends the parts it looks at to Anthropic's API, which returns its findings. Anthropic's commercial terms say it does not train its models on API data. The agent only looks at production apps it has been turned on for.
Access to your code
Connecting a GitHub repository is optional. It installs a GitHub App with read-only access to the repositories you pick: contents, metadata and pull requests. Packrat cannot write to your code. Disconnecting the repository deletes the code excerpts Packrat kept.
Where it runs
| What | Where |
|---|---|
| The app and its Postgres database | build.io, in the United States (us-east-1) |
| Telemetry files | Cloudflare R2 |
Network edge for packrat.sh |
Cloudflare |
The full list of companies that process data for Packrat is on the GDPR page.
Retention and deletion
Telemetry is kept for 12 months for active customers. Deleting your organization or application immediately deletes its data.
Certifications
Packrat has no SOC 2 or ISO 27001 report today. If you have security questions, email [email protected].
Report a vulnerability
Write to [email protected] with what you found and how to reproduce it. We answer every report, and we will not take legal action against research done in good faith that does not read or damage other customers' data.