Skip to main content
When you use Codepure to scan your applications, you are trusting us with your most valuable asset. We designed our infrastructure so your data stays secure, wherever your organization operates.

1. Where Your Data Is Hosted

Codepure SaaS is hosted in the United States on enterprise-grade cloud infrastructure. This is the default hosting location for the platform.
  • Cloud Provider: Google Cloud Platform (GCP).
  • Data Guarantee: Your account data, scan metadata, and vulnerability reports stay within the platform’s hosted environment.

GCC / Middle East Residency (On Request)

For customers who are specifically required to keep data within the Gulf region, Codepure offers GCC data residency on request to help meet local data-sovereignty requirements. This is available on request rather than as a self-serve option — contact us at admin@codepure.com to discuss your requirements.

2. The “Zero Storage” Source Code Policy

  • What we do: When you trigger a scan, Codepure pulls your code into a temporary, isolated memory environment. We scan it, generate the report, and instantly destroy the environment.
  • What we DO NOT do: We never permanently store, copy, or back up your proprietary source code.