Hi there. I'm the CEO and Co-founder of Codacy. Thanks for asking this question.

Our on premise product is designed for companies that require discretion and a higher security scrutiny.

We take security and data protection very seriously in our on premise product. We don't have any access to the product or machines running Codacy. We're very open to feedback and improvements and this is why we constantly are improving our policies and deployment processes. We have some of the largest and most security focused corporations using Codacy Enterprise.

Happy to answer more questions!

We'd have to monitor outgoing data at the time the code was being analyzed.

Even then, we'd probably need the code-review program to be open-source or audited by a third party.

Keeping code secret is somewhat useful for security and vital for maintaining some trade secrets.