Security

Security you can hand to your reviewers.

Snowtrek touches your source metadata, so we treat security as a first-class feature. Here's how we protect your data.

SOC 2 Type II
On our roadmap, not a current focus
GDPR
Compliant
CCPA
Compliant
DPA available
On Pro and up
Our practices

How we protect your data.

Encryption everywhere
All data is encrypted in transit with TLS 1.2+ and at rest with AES-256. Secrets are stored in a dedicated, access-controlled vault.
Read-only by design
Snowtrek requests the minimum GitHub scopes it needs and never writes to your repositories. We read commits and pull requests; that's it.
Least-privilege access
Internal access is role-based and granted on a need-to-know basis, with SSO and hardware keys required for every employee.
Monitoring & logging
We log access to production systems, alert on anomalies, and retain audit trails for review and investigation.
Resilient infrastructure
Hosted on AWS with automated backups, encrypted snapshots, and a tested recovery plan across availability zones.
You own your data
Your content is yours. Export it anytime, and we delete it on request. We never sell data or use your content to train external models.
Responsible disclosure

Found something? Tell us.

We welcome reports from security researchers and respond quickly. Email a detailed report and we'll acknowledge within one business day.

support@snowtrek.dev
Documentation

For your security review.

Planning a security review? Email us for a security overview and a completed security questionnaire under NDA. A formal SOC 2 report is on our roadmap, but it isn't a current focus.

Read the DPA
Get started

Give your customers a changelog worth reading.

Connect a repo, curate your first changelog with your team, and publish a page customers actually want to follow.

No credit card Set up in minutes
snowtrek.dev/changelog Highlight
Follow only the teams you care about
Subscribers choose which teams to follow, so every update they get is exactly what matters to them.
👍 42❤️ 18🎉 11