Access by responsibility
Each organization operates separately. Users can access only the projects and resources assigned to them.
Security and control
Access, permissions and change control
Establish organization access and delivery conditions. Autonomous development supervision operates within those policies, with project permissions and records.
Principles
Permissions and authorizations
Actions with approval
Copilot requests explicit confirmation before performing an action that modifies the project.
Sandboxes with controlled access
Test environments are separate from production, with access authorized through the platform.
Code in your repositories
Work is delivered in your organization's GitHub or GitLab repositories, according to its delivery rules.
Traceability
Statuses, actions, decisions and technical evidence are recorded.
Human control over integration
DevSense does not merge. An authorized person decides on final integration.
Action controls
Review an action before authorizing it
Copilot presents the proposed action and the resource it will change. Approving that operation is different from supervising every development step: once scope is authorized, DevSense directs technical execution and corrections.
Each authorization applies to one action and is valid for a limited time. If the resource changes in the meantime, the operation is not executed.
How Copilot operatesPrepared action
Review the proposed change and its effect.
Do you authorize it?
No
No changes
The operation is not executed.
Yes
Authorized execution
The action is performed and its result is recorded.
Integrations
API access and provider keys
Platform API keys must have an expiration date, can be revoked immediately and have every use recorded. AI provider keys supplied by your organization are validated and stored encrypted.
Enterprise data and infrastructure
Your code, deployment region and access requirements
The customer owns the code generated for its project. DevSense uses Azure as its foundation and can expand to agreed Enterprise regions, with customer infrastructure connectivity defined during implementation.
Enterprise evaluation
Your organization's requirements
Every organization has its own access, infrastructure and audit requirements. Discuss with our technical team how DevSense fits into your environment.