Security and data
How Provo handles your data
Postgres hosted on Render in the United States, separated per workspace; GitHub and Linear credentials encrypted with AES-256-GCM.
What Provo holds
- Specs and their versions
- Imported GitHub issue and pull request descriptions and Linear issues
- Requirements, test cases, open questions and run results
- Team members' names and email addresses
- Encrypted GitHub and Linear credentials
How long it’s kept, and how to export or delete it
Kept until you delete them (spec, project, run or the whole workspace). The no-account sample's text and suite are deleted 24 hours after they're made.
The full detail is in Provo’s data export and deletion policy.
Who processes it
Service providers (subprocessors), each on our instructions and only for the purpose shown:
- Render: hosting, databases and backups, in the United States.
- Stripe: subscription and license payments (card details go to Stripe, never to us).
- Resend: sending email.
- Anthropic: drafting test cases and open questions from your specs.
Questions and security reports
Provo is run by New Odyssey. To ask what we hold about you, to have it exported or deleted, or to report a security problem, email clio@new-odyssey.com. The privacy policy covers the rest.