GitHub General Privacy Statement

Security & Safeguards · Company practice

Data is processed with automated and sometimes manual techniques to detect abuse and terms violations

To promote safety, integrity and security across the Services, GitHub processes Personal Data using automated and, at times, manual techniques for abuse detection and prevention and for violations of its terms of service.

Supporting quotations

To promote safety, integrity, and security across our Services, we process Personal Data, using both automated and, at times, manual techniques for abuse detection, prevention, and violations of terms of service.

When carrying out these activities, GitHub practices data minimization and uses the minimum amount of Personal Information required.

Qualifications & exceptions

• GitHub says it practices data minimization and uses the minimum Personal Information required for these activities.
• Manual review happens "at times", not always.

Security & Safeguards · Company commitment

GitHub uses administrative, technical and physical security controls to protect your data

GitHub says it uses appropriate administrative, technical and physical security controls to protect your Personal Data. The separate Security section words this as using such controls "where appropriate".

Supporting quotations

GitHub uses appropriate administrative, technical, and physical security controls to protect your Personal Data.

GitHub uses administrative, technical, and physical security controls where appropriate to protect your Personal Data.

Qualifications & exceptions

• The two security statements differ slightly: one says "appropriate" controls, the other "where appropriate"; neither names specific measures.

Not stated here

• No specific security measures or standards are named.