Question 1

Is monogit SOC 2 or PCI compliant?

Accepted Answer

SOC 2 and PCI certify service organizations and payment systems. monogit is a client-side CLI that runs no service and never handles cardholder data, so it sits outside their scope. It is built so it cannot weaken the compliant environment it runs in.

Question 2

Does monogit send our source code anywhere?

Accepted Answer

Only to the git remotes you already push to. monogit has no backend and no telemetry. The only exception, fully under your control, is connecting the optional MCP server to a cloud LLM.

Question 3

Does monogit store or transmit our credentials?

Accepted Answer

No. It reuses your existing git and GitHub CLI authentication and never persists secrets of its own.

Question 4

Can monogit bypass branch protection or required reviews?

Accepted Answer

No. monogit fans out standard git commands; your server-side rules gate or reject them exactly as they would a manual push.