Skip to content
Pillion
Join the waitlist
Explore Pillion

European Git hosting. Clear data residency.

See where core Git and collaboration data is stored, which providers handle it and how access is controlled. Billing and optional AI review have separate processing arrangements, explained below.

Last reviewed 3 September 2026 · changes to this page are announced on the status page.

Allowed geography

For Pillion’s core data residency commitment, allowed geography means the EU member states, Iceland, Liechtenstein, Norway, the United Kingdom and Switzerland.

European Union
All 27 member states.
GDPR applies directly.
EEA
Iceland, Liechtenstein, Norway.
GDPR applies through the EEA agreement.
Adequacy
United Kingdom, Switzerland.
Current EU adequacy decisions; reviewed when they are renewed.

Where each class of data rests

Git objects and refsData plane + WALeu-central, Multi-AZAt rest
Git LFS objectsBlob prefixeu-central, Multi-AZAt rest
Issues, pull requests, commentsPostgreseu-central, Multi-AZAt rest
Attachments on conversationsBlob prefixeu-central, Multi-AZAt rest
Workflow artifacts and cachesBlob prefixeu-central, Multi-AZAt rest
SecretsSealed storeeu-centralEnvelope, per-owner key
Backups and replicasObject storageAllowed geography onlyAt rest
Transactional emailEU email providerAllowed geography onlyIn transit

Subprocessors

The core Git and product-data path uses named operators incorporated in allowed geography. Mollie is listed separately for billing; billing data is outside our core Git and collaboration data residency commitment.

Compute and network
Scaleway SAS
France · EU region, same as the storage.
Object storage and runners
Scaleway SAS
France · EU object storage and bare metal.
Transactional email
Scaleway SAS · TEM
France · EU account and security mail.
Payments
Mollie B.V.
Netherlands · billing data only; GCP disclosed for some products, Separate billing-data processing.
Read the Mollie review →

Optional AI review

Pillion Review sends code context to the model provider you choose. Its processing location and data-handling terms depend on that provider and your agreement. Choose an EU-resident endpoint when AI processing must stay in Europe. Explore AI code review and provider choice.

Who can read your repositories

People you granted a repository role, and no one else on your side of the line.
A named on-call engineer, only on a break-glass path that writes to your audit log.
No model training on repository contents. No third-party analytics inside the authenticated product.
A lawful order from a competent authority in the EU or the UK, which we will tell you about unless legally barred.

Encryption at rest, required OIDC SSO, rulesets on refs, a public status page, and an exit that is plain Git. Detail lives on the security page.

Straight answers

Is Pillion a US company with an EU region?

No. Pillion Ltd is registered in England and Wales, a jurisdiction holding a current EU adequacy decision, and the operators of the core Git and product-data path are incorporated in allowed geography. An EU region operated by a non-EU parent does not meet the definition we hold ourselves to, because the parent remains subject to extraterritorial disclosure law.

Do backups ever leave the region?

Core Git and collaboration backups and replicas stay inside the European geography described on this page: the EU, the EEA, the UK or Switzerland.

Is my code used to train models?

Pillion does not use repository contents, issues or pull requests to train models. If you enable AI review, code context goes to your chosen provider under that provider’s data-handling terms.

What if a government asks for data?

We require a lawful order from a competent authority in the EU or the UK, we disclose only what the order compels, and we tell the affected customer unless legally barred. Aggregate counts are published.

Can I keep CI compute entirely under my control?

Yes. Attach your own runners and no job ever executes on our compute. Caches and artifacts those jobs produce are still stored in-region, encrypted at rest.

What certifications do you hold today?

None yet, and we will not imply otherwise. Controls are mapped against ISO 27001 and the audit is planned; until it is done, this page says planned.