The short version
DocParity reads the parts of a pull request needed to work out which documentation a change invalidates, and stores the resulting findings. It does not store your source code. If that is still more than your policy allows, DocParity can be self-hosted, and it runs without any LLM provider at all.
What we process
When the GitHub App analyses a pull request, it reads:
- Paths of the files the pull request changed
- The diff hunks of those files
- The text of documentation files that the deterministic rules flagged as affected
- Pull request metadata: number, title, branch name, the merging account, and the commenter's relationship to the repository
- Repository configuration from
.docparity.ymlanddoc-mapping.yaml
What we store
- Findings - the changed file path, which documents were affected, why, a confidence score, the outcome, who approved the merge, and when
- Learning data - which code and documentation paths change together, which mappings a team accepts, and wording preferences observed in documentation edits
- Document vectors - numeric embeddings of documentation files, keyed by a content hash, used for semantic ranking
- Usage - a record that a given pull request was analysed in a given month, for plan metering
- Account data - your GitHub login and the list of repositories your account can access, so the dashboard shows you only your own
What we do not store
- Your repository's source code at rest
- Files that no rule pointed at
- Credentials, tokens, or environment variable values
Environment variable names are read to check whether they are documented. Their values are never read or stored.
Who else sees it
- GitHub - the source of the data and where results are written back
- The configured LLM provider - receives the diff summary and the text of flagged documents, only to draft a replacement. Leave the API key unset and no document text is sent anywhere; the deterministic engine still detects drift.
- The configured embeddings provider - receives documentation text to produce vectors for semantic ranking
- Infrastructure providers - hosting, database, and error monitoring, where enabled
We do not sell data, and we do not use your code to train models.
Retention and deletion
Findings and learning data persist so scores, trends, and audit exports remain meaningful over time. Uninstalling the GitHub App stops all processing immediately. To have stored data deleted, contact us at the address below and we will remove the records for your repositories.
Self-hosting
DocParity can run entirely on infrastructure you control, in which case none of the above involves us at all - the data stays in your network, and you choose whether an LLM provider is involved.