Preview package — documentation only

SDVM Privacy Policy

Last updated: 2026-06-08

SDVM is currently provided as a preview GitHub Action and documentation package.

Summary

SDVM is designed to run in the user's own GitHub Actions or local execution environment. The SDVM preview does not operate a hosted SaaS backend, does not provide a multi-tenant cloud service, and does not collect telemetry by default.

What SDVM processes

When used by an operator, SDVM may process workflow traces, diagnostic artifacts, reports, configuration files, and related technical metadata provided by the user or generated inside the user's own environment.

The operator is responsible for ensuring that any data used with SDVM is authorized for that purpose and does not include secrets, credentials, private customer data, or sensitive payloads unless appropriate controls are in place.

What SDVM collects

The SDVM preview does not collect data into an SDVM-operated backend by default.

SDVM does not require users to send traces, reports, credentials, or workflow data to a centralized SDVM service as part of the preview GitHub Action package.

GitHub and third-party services

When SDVM is used through GitHub Actions, GitHub's own platform terms, logs, retention settings, permissions, and security controls may apply.

Users should review their GitHub repository settings, workflow permissions, retention policies, and organization policies before running SDVM on private or sensitive workflows.

Telemetry

The SDVM preview does not include default SDVM telemetry, cross-tenant learning, or centralized collection of workflow traces.

Marketplace status

SDVM Marketplace publication, if pursued, is expected to remain a preview publication. Marketplace publication does not imply commercial maturity, enterprise SLA, autonomous remediation, causal proof, or guaranteed workflow improvement.

Security and support

Do not include secrets, credentials, private traces, customer data, or sensitive payloads in public GitHub issues.

For support and security guidance, refer to the SDVM repository's SUPPORT.md and SECURITY.md files.

Changes to this policy

This policy may be updated as SDVM evolves. Future versions may provide additional details if SDVM adds hosted services, telemetry, accounts, billing, or other platform capabilities.

Contact

For non-sensitive questions, use the public GitHub Issues channel associated with the SDVM repository.

Do not disclose sensitive security details publicly.