Development and Source Code

General principles

• Static code analysis to detect security risks and dependency vulnerabilities

• Automatic deposit scanning for secret leaks

Artificial Intelligence

• Use private LLMs whenever possible (GPT, Claude Dedicated Instances in Azure, or AWS)

• Avoiding exposure of sensitive datato public AI services