Private-pilot positionPatchFlow is ready for bounded, founder-led pilots on non-critical repositories. It is not represented as SOC 2, ISO 27001, IRAP assessed, or generally available.
The four controls that matter most
Repository scoped
The GitHub App acts only on repositories selected by the customer.
Fail closed
Missing, pending, cancelled, or failed named Checks cannot become ready.
Commit bound
The verdict is tied to the exact pull-request head SHA and invalidated by later edits.
Human merged
PatchFlow opens draft pull requests and never merges customer code.
What buyers can review
Contact
Security reports and questionnaires: security@patchflow.run.
Privacy and data requests: privacy@patchflow.run.