Using SourceTree for work - IT security question

Eric_ym7g8k

Hi, we have developers in my company planning to use Sourcetree as their coding env. We are being asked by InfoSec group to start evaluate the product. However, prior to that, we would like to know a bit more of Sourcetree:

• Does SourceTree capturing/storing data outside of our coding environment, or out of our premise?
• Does SourceTree store customer code in the Cloud?

 

Thanks for your help in advance.

bgannin

Hi Eric,

1. Sourcetree does not send any personally identifiable information (PII) outside of the user's machine, ever. There are certain analytics, such as crash reporting, that are enabled by default. Anonymous usage analytics to help us improve the product are optional and can be disabled during setup.

2. Sourcetree is simply a client displaying Git or Mercurial repositories; hosting on remote servers and pushing to them is something configured and managed by the user in the repository (this is necessary regardless of Sourcetree) We aren't responsible for remotely managing/storing your code.

Brian Ganninger
Senior Mac Developer, Sourcetree