ARC request forms collect the contact details and PR context needed to respond.
Privacy
ARC is designed so private source code does not need to leave your repository.
Trust Brief access starts with the minimum information needed to understand the pull request, contact the requester, and decide whether a local setup is appropriate.
Private source code is not required for the first Trust Brief request.
Private repository reviews should use local-only setup so source stays in the customer repository.
Lead requests are used to evaluate access and follow up about ARC setup.
Use local-only setup for private repositories.
Public PRs can be reviewed first. Private code should stay where it already lives.
Read the security model