8. Verification & Summary
Inspect before you trust
You are not required to take any of the above on faith. The agent supports a download-then-inspect-then-send workflow:
# 1. Pull data to local disk only - no Hivel credentials needed, nothing uploaded
./hivel-agent --config config.yml --env-file .env download --output-dir /tmp/snapshot
# 2. Inspect exactly what would be sent
gunzip -c /tmp/snapshot/jira/jira_issues.json.gz | jq '.[0]'
# 3. Only once satisfied, upload the inspected snapshot
./hivel-agent --config config.yml --env-file .env send --input-dir /tmp/snapshotThis lets your security team review the literal payload - the gzip-compressed JSON files that would be uploaded - before any data leaves your network, on the very first run and any time after.
Summary - what leaves your network boundary
Category
Leaves your network?
Issue/PR/MR/commit metadata (titles, status, dates, authors, labels)
Yes - this is the product
Commit/PR/MR message and review comment text
Yes, unless strip_text_content is enabled
File paths + added/removed line counts
Yes
Source code / file contents
Never
Diff or patch content
Never
Attachments
Never
Your Jira/GitHub/GitLab/Bitbucket/Azure DevOps credentials
Never (used locally to authenticate outbound calls only)
Local git clones used for Bitbucket/Azure DevOps work-metrics
Never - stays on your infrastructure; only the derived classification numbers are uploaded
Agent config (config.yml)
Only if you opt in (send_agent_config), and only with credentials redacted
Agent logs
Only if you opt in (stream_logs)
Raw HTTP traffic incl. credentials (debug.log)
Never automatically - written to local disk only; treat as sensitive if you choose to share it manually
Claude Code usage events (claude_events.jsonl via claudeotel)
Yes - contents depend on which OTEL_LOG_* flags the customer enabled in Claude Code's own settings; no redact_names_and_urls/strip_text_content equivalent exists for this provider yet.
All data transmission uses HTTPS/TLS. The agent requires no inbound network access at any point.
Last updated