Does ProPR hold compliance certifications?
No. ProPR holds no compliance certifications. The Apache 2.0 source, the trust page and the privacy policy document exactly what runs where, and self-hosted ProPR stores code, credentials and agent activity on your own infrastructure. Each task's prompt and code context go to the AI provider you selected, and ProPR writes branches and pull requests to GitHub. The optional Connect relay, Connect Plus preview storage and MCP add further recipients, each listed on the trust page.
Do agents get write access to our repositories?
Only orchestrating goals do. Implementation, follow-up, fix, review and direct-goal containers hold a read-only GitHub token, and ProPR itself creates every branch, commit, push and pull request. An orchestrating goal keeps write access to drive the issues it files, and your team still reviews and merges in GitHub.
Who pays for AI usage?
You pay your providers directly, through the subscriptions you already hold or metered API billing. ProPR adds no token markup and shows the model, tokens and cost behind every pull request.
Can we keep agents off the open internet?
Yes, for implementation, follow-up, fix, review, goal and indexing runs. Restricted network mode starts those containers with no network and routes their traffic through a per-run allowlist proxy on the worker: the agent's provider API, GitHub, the npm and PyPI registries and the hosts you add. Enforce it for the whole instance, and read every denied host on the task timeline. Plan generation stays on the open network, and Antigravity falls back to open mode, or is refused when enforcement is on.
Which agents can we standardize on?
Claude Code, Codex, Antigravity CLI, Mistral Vibe and OpenCode, chosen per repository and per phase. Administrators decide which agents and models are allowed.