Need brief description on code security in SonarCloud. What is the retention policy of retaining code stored in SonarCloud?

SonarCloud
,
1

ALM used (Azure DevOps)
CI system used (Azure DevOps)
Languages of the repository - C#

Need brief description on code security in SonarCloud. What is the retention policy of retaining code stored in SonarCloud?

Will our entire source code will be copied to SonarCloud in AWS?. If is it so, what is the data security policies we are offering ?

What is the guarantee that our code is secured? Also is there any retention policy of destroying/removing old codes?

Will the code moved to SonarCloud it will be removed once analysis is completed? or only metrics will be backed up?

Need a clear architecture diagram how SonarCloud operates internally on scanning the code.

2

Hi @jebaschulz

You can read our privacy policy here : https://sonarcloud.io/documentation/appendices/privacy/

And our security statement just here : https://sonarcloud.io/documentation/appendices/security/

HTH,
Mickaël