Security & privacy
What we commit to when your team uses x-Arbiter.
Your code stays yours
x-Arbiter runs in your repository. Your source code is never sent to Ghost Works. If your team connects the dashboard, it receives governance records — events, findings and decisions — never your code.
You choose where AI work goes
When a model checks the AI’s work, the code goes to the provider your team chose, and nowhere else. Before a choice made on the dashboard can send code to a new provider, a person in your team agrees to it.
Your keys stay with you
Your AI providers’ API keys stay on your machines. They are never sent to Ghost Works or stored by us.
Your records are yours
Every decision, finding and ruling is kept in your own repository. If you stop using x-Arbiter, you keep all of it.
Every license includes every protection
None of these protections is sold as an extra.
Reporting a vulnerability
Email info@ghost-works.ai with “Security” in the subject. We read every report and will tell you what we found.