Using SourceTree for work - IT security question

[Eric]

Hi, we have developers in my company planning to use Sourcetree as their coding env. We are being asked by InfoSec group to start evaluate the product. However, prior to that, we would like to know a bit more of Sourcetree:

• Does SourceTree capturing/storing data outside of our coding environment, or out of our premise?
• Does SourceTree store customer code in the Cloud?

Thanks for your help in advance.

[bgannin · Accepted solution]

Hi Eric,

1. Sourcetree does not send any personally identifiable information (PII) outside of the user's machine, ever. There are certain analytics, such as crash reporting, that are enabled by default. Anonymous usage analytics to help us improve the product are optional and can be disabled during setup.

2. Sourcetree is simply a client displaying Git or Mercurial repositories; hosting on remote servers and pushing to them is something configured and managed by the user in the repository (this is necessary regardless of Sourcetree) We aren't responsible for remotely managing/storing your code.

Brian Ganninger
Senior Mac Developer, Sourcetree

[Eric]

Thanks for the post, that will be sufficient info for us to start an internal discussion of this tool.