Security
Your projects stay yours
Master is built so every project, file and app user is isolated. Here is how we protect your work.
How we protect you
Security built into every layer
Project isolation
Each project only sees its own data. Database rows, files and app users are scoped to their project.
Encrypted secrets
API keys and connections are stored encrypted and never sent to the browser.
Private by default
Uploads and previews use private storage with short-lived signed links.
Immutable deployments
Every publish creates a versioned deployment you can review or roll back.
Access control
Owner-only control of Cloud, domains and billing. Viewers are strictly read-only.
Security scans
Scan any published version and fix findings before they reach users.
Read how we handle cookies in our privacy notice.
Questions about security?
Our team can share more details for your review.