Enterprise-grade security in every app. No setup needed.
Encryption, roles, audit logs and intrusion detection are on from the first app you build, on every plan.
7-day free trial · Free white-glove onboarding
- AES-256 encryption
- SOC 2
- GDPR
- Role-based access
- Intrusion detection
- Bug bounty
Encrypted by default
All data is encrypted at rest and in transit with industry-standard protocols. There is nothing to turn on and nothing to configure.
- AES-256 encryption
- Encrypted at rest and in transit
- No configuration required
Roles and permissions in every app
Role-based access control is built into every app. Define roles, set permissions and manage access levels without writing a line of security code.
- Table and record rules for read, create, update and delete
- Each person sees only the apps and data their role allows
- Admins can block or unblock a user instantly
Audit logs for every change
Track user activity, data changes, access attempts and security events. Each entry records who did it, when, from which IP address and which record it touched.
- Search by user, action or date, then export the results
- Built in on Team plans from 25 members
- Available on request on every other plan
Intrusion detection, always on
Continuous monitoring watches for unauthorized access attempts, suspicious activity and potential threats, and sends alerts automatically so your team can respond in real time.
- Enabled across all environments
- Automatic alerts on suspicious activity
- Security patches applied automatically, without downtime
Keep only the data you need.
Retention rules for GDPR, CCPA and GLBA run on their own, with data minimization by default. Every erasure is logged with who, what, when and why.
- Right to erasure under GDPR Article 17
- Retention policies applied automatically
- Tamper-proof audit trail you can export
Advanced access control for enterprise teams
Extra controls for companies with compliance teams.
Compliance Officer role
Creator access plus data masking rules, audit controls and access to unmasked data. On Team plans from 25 members.
Block and unblock users
Block anyone instantly. Blocked users can't sign in or be impersonated. Reversible, and every action is logged.
Masked “View as user”
Impersonation always masks sensitive data, whatever the viewed user can see, in line with PCI-DSS and SOC 2.
Security on every plan
Every plan includes:
- AES-256Encryption
- RBACRoles and permissions
- Audit logsOn request
- GDPR and SOC 2Compliant infrastructure
- Intrusion detectionAlways on
Report a vulnerability, or ask us anything
Bug bounty program
Found a security issue? Report it responsibly and our security team reviews every report carefully.
Security questions
Send our security team your questionnaire, review or concern and we'll address it. The Trust Center shows our security posture, compliance certifications and data handling practices.
Build with security from day one.
Every app you build is encrypted, permissioned and monitored from the start.7-day free trial · Free white-glove onboarding