What this build stores.
This disclosure describes the SofiCore invite-only pilot. Contact info@soficore.space about access, data handling or deletion. An operating legal entity and final production terms have not been supplied.
Account and workspace
When hosted identity is configured, the application uses its identity ID, display name and email to identify the signed-in workspace.
- Source snapshot and repository metadata
- Requirements and criterion confirmations
- Analysis records and encrypted GitHub tokens
Use and deletion
Source is used for the analysis you request. Default Copilot does not send it to an external model.
- No model training pipeline exists in this application
- Optional model mode sends a bounded evidence packet after opt-in
- Owner can delete active workspace records in Settings
Service providers
The live SofiCore pilot at soficore.space is hosted on Vercel and uses Firebase Authentication for accounts and Firestore in Belgium for saved workspaces, analysis records and encrypted GitHub connections. GitHub supplies repository data through the read-only App connection. Live Copilot uses saved evidence records; no external model provider is configured for this deployment. The published Azure review is a historical case-study record. If model inference is enabled later, the configured provider receives a bounded question and evidence packet only after explicit opt-in.
Retention
Active workspace source and requirements persist until deleted or replaced. OAuth state is time-limited. Hosting infrastructure may retain logs and backups under its provider policies; this application cannot promise deletion of those provider records.