[pjhyett]

We market (and price) GitHub:FI as our enterprise product specifically because we feel small to medium size companies should be using github.com.

If your and/or your partners need some help putting your mind at ease about hosting your code with us, feel free to email me directly at [e-mail] and I'll do my best to help.

[turbinemonkey]

I'd much rather see a public statement on these sorts of issues. The only thing I see on the site that is even remotely relevant is a one-liner on the plans page: "We make every possible attempt to never transmit your data unencrypted."

Presumably, the amount of proprietary code you will manage will only increase over time, perhaps remarkably so. It would be somewhat reassuring if I saw something that indicated that you take this stewardship seriously, rather than tossing off "best effort" one-liners.

[pjhyett]

You're absolutely correct, we have scraps of information about our security here and there, but no formal page spelling it out. Our security page will be located at http://github.com/security, expect it up within the next day or so.