Frequently asked questions

Choose Sign in, then CodHub or Cloudburg. Use the provider you originally chose to return to your saved workspace; accounts are not automatically linked by email or name. Cloudburg sign-in does not connect CodHub repositories. The identity sign-in does not connect repositories or read their contents. Google customer sign-in is unavailable. New workspace owners review the existing Terms before acceptance.

No. Upload review analyzes selected files independently. The optional CodHub repository connection is a separate permission grant covering accessible repositories, including private ones; the current feature uses metadata inventory and selection only. The access token is encrypted on the server and cannot be used after expiry. Disconnect removes the connection; scheduled cleanup removes expired connection records. There is no automatic renewal. Reconnecting requires an explicit new authorization and clears prior selections. This does not activate repository source sync, automatic PR reviews, comments or fix publishing.

Select at most 40 JavaScript/TypeScript files: 32 KiB and 1,000 lines per file, 512 KiB total. Only submit files you may share, after removing secrets and personal data. The guided example provides exact harmless inputs and the expected finding before you spend allowance.

Native static checks identify bounded source operations and import relationships in the supplied files. They do not execute code, install dependencies, run project tests or send source to an AI provider. Read coverage, unavailable checks and omissions with each result. Zero findings, a dismissed finding or a customer-reported completed plan does not establish safety or a verified repair.

A free workspace receives three completed reviews per UTC calendar month, without a card or subscription. Unused allowance does not roll over. Completed reviews count even with partial coverage or zero findings; deleting a report does not restore allowance. The Review usage page shows the current allowance, reviews in progress and exact reset. If a submission has an uncertain outcome, use the existing recovery flow rather than submitting it again. Confirmed failed processing releases its reservation. An uncertain or still-running request must be recovered using its existing request identity; do not submit it again merely to bypass the displayed state.

An active paid Pro or Team subscription provides unlimited completed upload reviews, with up to three processing at the same time per workspace. Activity counts remain visible; there is no monthly paid-review balance to exhaust. File limits, seven-day report retention and access checks still apply. New purchases remain paused.

Raw upload source is processed transiently, not stored in the report database. Reports retain findings and metadata, including paths, line numbers, coverage, digests and import relationships. Owners can access reports for seven days and delete saved report content sooner. Expired reports are denied on retrieval and their content is removed by scheduled cleanup. Account, acceptance, request, usage, billing, security and support records can remain for their stated purposes; seven days is not a promise to erase every related record or provider backup. See Privacy.

They offer different ways to work with the same retained evidence: inspect it, save a reasoned decision, understand its limits, inspect security coverage, and record a manual change/check plan and your own outcome. Opening views, saving work and preparing a handoff consume no new review allowance. Saved work expires with its report. CodLab does not execute your plan or verify a fix.

Select retained findings, preview the exact saved snapshot, then download Markdown, JSON or print-ready HTML. Notes, dismissal reasons, dismissed findings and history default to excluded. The default still includes retained paths, findings, proposed checks, customer outcomes and the last plan author/date; technical detail also includes inspection/change text and evidence URLs. Review the exact preview before sharing. Changes to saved decisions or plans can invalidate the preview even when the analyzer report is unchanged. An expired or deleted report also blocks its download. HTML can be printed or saved as PDF in your own browser; it is not a server-generated PDF. Downloads remain on your device after report expiry. Read the handoff and storage details in the Privacy notice before sharing.

No. Current summaries describe saved bounded review evidence from at most 20 completed retained reports. A truncated summary can omit additional retained reports. They do not run another scan, refresh source or establish a complete security assessment. Empty or partial coverage must remain visible.

New purchases remain paused. Repository source synchronization, automatic PR reviews and fix publishing are not active. The availability page is the current guide to released functions. A workspace, download or optional metadata connection does not activate a paid plan or additional permissions.

The creator and partner page offers a manual campaign brief and a fictional version-feedback example. It does not store submissions, invite participants, send messages, execute contracts or handle payouts. Business acceptance, publication approval and technical validation are separate decisions.

Use support@codlab.app for product support, hello@codlab.app for general enquiries and privacy@codlab.app for privacy requests. Do not email credentials, private source or sensitive customer data. Operator details are in the Imprint. See the browser-storage explanation and Privacy notice for purposes, controls and retention.