What baselane stores, what it never stores, and how we handle your code.
Last updated July 2026.
Your organization's standards, derived analysis profiles (facts, not code), generated artifacts, pack registry, and rollout state.
Your repository source code. It is analyzed in an ephemeral workspace and discarded — only the derived profile and generated files persist.
On the individual plan you bring your own Claude API key; model usage is billed to your own account and stays under your control.
Questions about data handling? Email hello@baselane.sh and we'll walk your security team through it.