Trust & data

Your code stays yours.
Every number has a source.

GTM is a broker, not an executor. It stores briefs, statuses and structural metadata — never your repository, never your keys.

Absent ≠ zero

A count we couldn't read renders as a named absence with the reason — never a fabricated 0 or a placeholder stat.

We store 0 keys

Discovery is read-only. Secrets, env values and keys are redacted client-side and rejected server-side — they never become facts.

Deterministic score

Same evidence, same score — property-tested. Every point links back to the run id that produced it.

Data handling

Where your metadata lives and how long we keep it. Full detail on the Privacy page.

ResidencyAll metadata hosted in AWS eu-west-2 (London), multi-AZ.
Sub-processorsAmazon Web Services (hosting) · Anthropic (model API, via your own key).
Model callsZero-retention mode enforced on every outbound LLM call.
RetentionSession counters 30 days · graph metadata until project deletion · audit logs 12 months.
Your rightsAccess, rectification, erasure, portability & objection under UK GDPR — [email protected].
Data-flow map

Every path customer data takes through a sub-processor is documented — a hard gate for enterprise buyers.

Value-claim verification

A quantified saving is measured, reproducible and honestly bounded — first-class evidence, not a headline.

Assurance depth

Every critical invariant ships with a kill-tested witness — not just a score above a threshold.

gtm.inc PrivacyTermsSecurity