SecurityPlain answers, kept up to date.What you build here
What you build here
stays safe and stays yours.
How cdbx protects your Apps and data, where they live, and what we haven't done yet.
The short version
Four questions people ask us first.
- Where does my App run?On Amazon Web Services, in the EU or the US, whichever is closer to you. Disks and stored files are encrypted.
- Who can see it?You choose. Each App is public or private, and you can change it any time. In a team, Apps are private by default and admins decide who can view or edit.
- What happens to my keys?Your own AI key and your connections to other tools are stored encrypted and only used for your requests. Remove them any time.
- What if I stop using it?An App nobody opens for 30 days is stored away and comes back when you open it. Your code is yours: export any App to GitHub as a real repository, whenever you want. An App left unopened for a year is deleted, and we email you twice first.
What we do
On for every App, nothing to set up.
These protections come with every App. We'll say plainly where we're not there yet.
- Every App on its own. Each App runs in its own sandbox. One App can't reach another App's files.
- Code runs offline. Code you run in the code runner can't reach the internet, and every run has a time limit.
- Checked before it goes live. Pro and Team Apps are scanned for common security problems, like a hardcoded key, before they're published.
- Encrypted where it's stored. Server disks, stored Apps, your AI keys and your connections.
- Payments by Stripe. cdbx never sees or stores your card number.
- Your code is yours. Export any App to GitHub as a real repository, whenever you want.
- Single sign-on and audit logs.Planned
- Certifications. We don't have SOC 2 or similar yet. Tell us what your company needs and we'll say honestly where we stand.