Repository access
The highest level from any source wins. Greyed-out sources are overridden by a higher one.
| Repository | Access | Comes from | Direct grant |
|---|---|---|---|
| api | maintain | Team: Platform · maintainAll workspace members · write | None⌄ |
| backend | write | All workspace members · write | None⌄ |
| billing | write | Direct grant · write | Write⌄ |
| web | write | All workspace members · writeDirect grant · read | Read⌄ |
1 unsaved change · the review shows the seat impact before anything is saved
DiscardReview changesCombine workspace roles, custom roles, teams and access to single repositories, and restrict sensitive repositories to named people. Contractors can get one repository and see nothing else. Read-only access is free.
See where every person's access comes from, and what a change does before it's saved. Require two-factor authentication for everyone, record every access change in the audit log, and own your employees' accounts outright with managed accounts. AI agents get their own limited accounts, and people approve their work.
The US CLOUD Act can compel US-based companies to hand over data under their control, even when it's stored in Europe. Gitoro is Danish, with EU-only hosting for your code, pipelines, and AI.
GDPR by design
Export or delete your data anytime.
EU-only infrastructure
Your code and data stay in Europe.
European AI
AI features run on models hosted in Europe.