Privacy

Last updated October 11, 2026

What Code Lab is

Code Lab is a sample app made by the Sredify team. It connects to Sredify through Sredify's public API, like any other app. A company Admin approves it on Sredify's approval screen, and can disconnect it at any time in Sredify (Account, Apps and API).

What it reads

• Your projects, and who is ticked on each one.
• Your people: name, title, R&D role, whether they still work there, and the git names linked to them. Never pay.
• Your SR&ED reports: angles, tasks, eligible work, hours, and the commits, files and Jira keys behind each item.
• Only if someone clicks Allow evidence: the supporting evidence already confirmed on a report.

What it changes

• Hours on an eligible work item, only after someone clicks Allow changes and then Apply. Sredify labels the change with Code Lab and the Admin who approved it, and Undo puts back what was there.
• Supporting evidence, only after someone clicks Allow evidence and then confirms an item. Sredify records who confirmed it.

Where it keeps your data

• In your browser tab only (session storage). Closing the tab clears it, and so does Disconnect.
• Code Lab has no database and no accounts. Its server saves nothing you send it.
• No cookies, no analytics, no ads, no tracking.

Suggest evidence and AI

• When you click Suggest evidence, Code Lab's server sends one eligible work item to its AI service (OpenRouter, which passes it to the model provider) to draft meetings, references, steps and tests.
• What is sent: the item's title and summary, why it qualifies, the report's dates, its commits (date, first line, author), file names, Jira keys, and the names of the people on the project. Never source code, pay or company details.
• Your Sredify sign-in goes to Code Lab's server only to check with Sredify that you are connected. It is never sent to the AI service and never stored.
• Drafts stay in your tab until a person confirms, edits or dismisses each one. Only confirmed items are sent to Sredify.

Hosting

Code Lab is hosted on Vercel. Like any web host, Vercel keeps short-lived request logs (for example IP address and the page asked for) to run and protect the service.

Questions

Write to hello@sredify.ca.