Security you can audit
SOC 2 Type II, GDPR compliant, and fully open source. We protect your data with strong controls, and let you verify every one of them.
How we keep your data safe
The essentials, without the security-theater checklist. Every claim below is enforced in code you can read.
Open source, auditable
Every line of the platform and the SDKs is public. Read the code, verify our claims, and send a PR.
Encrypted access tokens
Your GitHub and GitLab access tokens are encrypted at rest, never stored in plain text.
Screenshots on secure S3
Stored on AWS S3 in the US and replicated to the EU, encrypted at rest and in transit with modern protocols.
SOC 2 Type II
Independently audited controls across infrastructure, access management, and data protection.
No source code access
Argos never needs your source. An optional GitHub mode works without any content permission.
Least-privilege access
Access to your data is role-based, logged, and monitored, and deleted when you leave.
Independently audited, continuously
SOC 2 is the AICPA framework for how organizations manage customer data across security, availability, processing integrity, confidentiality, and privacy. Type II verifies our controls work over time, not just on paper. This is a long-term security investment, not a short-term growth play.
Privacy built into the product
Many of our customers are based in Europe or serve European users. We align our operations with GDPR, from how we handle data to how we design our systems. Data is stored in the US and replicated to the EU, with Standard Contractual Clauses covering lawful transfers.
- Know how their data is used
- Access and correct their data
- Delete their data
- Limit or object to processing
- Data portability
- Protection from solely automated decisions
All datastores are encrypted at rest. Sensitive information is encrypted at the application level.
We implement strict access controls to ensure that only authorized personnel can access sensitive data.
We only collect and process the minimum amount of personal data necessary for our services.
Found something? Tell us
We value input from the community to help us detect vulnerabilities. If you believe you have found a security issue, please follow our disclosure policy to report it.
Frequently Asked Questions
Are my builds and screenshots publicly visible?
Open source projects on Argos are public by default, meaning their builds and screenshots are visible to anyone.
For private projects, all builds and screenshots are accessible only to authorized users within your organization. All data is secured and access-controlled.
How secure is Argos?
Yes. Argos is SOC 2 Type II compliant, fully open source, and trusted by security-conscious companies, including cybersecurity firms and banks.
Our commitment to transparency, security best practices, and rigorous operational controls makes Argos a reliable platform for safeguarding your visual testing data.
Where are screenshots stored?
Screenshots are securely stored on AWS S3 in the United States and replicated to the European Union. All data is encrypted at rest and in transit using modern encryption protocols.
Can Argos access my builds?
Only authorized Argos engineers can access builds for support or debugging purposes. Access is strictly role-based, logged, and monitored.
Is Argos open source?
Yes. Argos is fully open source. You can audit our codebase at github.com/argos-ci.
What data does Argos collect?
Argos only processes the data necessary for visual testing. This includes:
- Screenshots you explicitly upload
- Commit metadata (e.g. SHA, branch name)
- Pull request information (if available)
Argos does not collect analytics, behavioral data, or your source code.
Can I delete my data from Argos?
Yes. You can delete builds, screenshots, or entire projects at any time from the Argos dashboard. If you need to enforce full deletion for compliance purposes, you can contact our support team for assistance.
Supercharge your product quality
See every change your team and your agents make. Review with confidence, and merge faster.