&
Security

Your data is safe here. Even if you never think about security.

You shouldn't need to be an expert to put an app online safely. &Deploy switches the protections on for you, checks every change, and tells you in plain English if anything needs your attention.

Private by defaultNew data is locked until you choose who can see it.
Nothing goes live without youChanges wait on a private test copy until you say so.
Backed up every dayAutomatic, encrypted backups of every app's data.
Mistakes caught for youWe check every change for security problems before it ships.
Go back any timeEvery version is saved, so undoing a change is one sentence.
Everything recordedA permanent history of who changed what, and when.
What we do for you

Protected from the first version.

Private until you say otherwise

When your app stores something new, like a list of customers, nobody can see it until you decide who should. That's the opposite of how most tools start, and it's how most data leaks happen.

Checked before it goes live

Every change is checked for common security mistakes, like information that strangers could read or a password left in the code. If we find one, it can't go live until it's fixed, and Claude is told how in plain English.

Each app sealed off

Every app runs in its own space with its own private storage and keys. One app can never see another's data, even in the same account.

Encrypted, and backed up

Everything travels over secure, encrypted connections. Passwords and keys are encrypted when stored, and every app's data is backed up automatically every day, with the backups encrypted too.

You control what Claude can do

Claude only gets access to the workspace you choose, can't put anything live unless you allowed it and asked, and can be disconnected with one click.

A record of everything

Every change, sign-in and approval is written to a history that can't be edited, even by us. You'll always know who did what, and whether it was a person or Claude.

Straight answers

The questions people ask us.

Can strangers see my app's information?
No. Everything your app stores starts private. Only the people you allow can see it, and we check for anything left open before each change goes live.
Could another company on &Deploy see my data?
No. Every app runs in its own sealed space with its own private storage and keys.
What if I accidentally put a password in my app?
We stop it. Changes containing passwords or secret keys that visitors could see are blocked before they go online, and we tell you exactly where the problem is.
What if something goes wrong with an update?
Go back in one sentence. Every version is saved. Ask Claude to bring back the previous one.
What if your servers fail?
Your data is kept in three copies on separate machines, so another takes over. It's also backed up every day.
Can Claude do something I didn't ask for?
No. You choose what Claude may do when you connect it. It can't put anything live unless you allowed that and asked, and you can disconnect it in one click.
Will I know what's happened in my account?
Yes. Every change, sign-in and approval is recorded in a history that can't be edited, showing who did it, and whether it was a person or Claude.
What happens to my data if I leave?
It's yours. Delete an app and it goes offline immediately. We keep a copy for 30 days in case it was a mistake, then remove it for good. If a payment fails we pause apps, never delete them.
Built to keep working

Reliable without you lifting a finger.

Three copies of your dataEach app's database is kept in three copies on separate machines. If one fails, another takes over.
Daily backupsAutomatic, encrypted backups every day, kept for two weeks, stored separately from your app.
Keeps running on its ownYour apps don't depend on our dashboard. If it's ever down for maintenance, your apps stay online.
Grows with your appWhen more people use your app, more capacity is added automatically. You don't need to do anything.

Your apps run on Akamai Cloud, one of the world's largest internet infrastructure companies. Check the live state of everything on our Status page.

Your account

Keep your account locked, too.

Turn on two-step sign-in, using your fingerprint, face or phone, so a stolen password isn't enough to get in. Workspace owners decide who can do what, and only admins can put things live or approve access to company systems.

Company data

Your IT team stays in charge.

If an app needs information from inside your company, Claude can only ask. Your IT team reviews each request, approves it for specific apps, and can switch it off instantly. With Controls, the person who asked can't approve their own request.

For your IT or security team

Need the details?

Forward this page to whoever checks these things at your company. Everything is below, and they can contact security@anddeploy.com with questions.

Technical details for your IT team
Hosting
Akamai Cloud (Linode), Kubernetes (LKE). Nodes behind Cloud Firewall with inbound deny-by-default.
Tenant isolation
One Postgres database per app environment with its own login roles; CONNECT revoked from PUBLIC. One Kubernetes namespace per environment under Pod Security "restricted" with default-deny network policies (no access to other tenants, cluster internals or the cloud metadata service).
Data access rules
Postgres row level security is enabled automatically on every new table. An automated advisor blocks production deploys on tables without RLS and flags permissive policies, security-definer views and mutable function search paths.
Encryption
TLS for all traffic (TLS 1.3 to databases, SCRAM-SHA-256 auth). Secrets, database credentials and signing keys encrypted at rest (Rails Active Record encryption). Backups encrypted with AES-256.
Backups and availability
PostgreSQL 18 via CloudNativePG: 3 instances on separate nodes with automatic failover, continuous WAL archiving and daily base backups to object storage, 14-day retention. Point-in-time restore available as an add-on.
Code and builds
Every push is scanned for secrets (service-role keys, private keys, live API keys) and checked against the OSV vulnerability database. Builds run in ephemeral, credential-free sandboxes with public-only egress.
Claude access
OAuth 2.1 authorization code flow with PKCE (S256); tokens hashed at rest, 1-hour lifetime with rotating refresh tokens, bound to one workspace. Production deploys require a separate scope and an explicit user request.
Accounts
Passwords of 12+ characters, bcrypt-hashed; optional passkeys (WebAuthn) or TOTP; rate-limited sign-in; session rotation and idle expiry.
Audit log
Every change recorded with actor (person or MCP client), IP and request ID; append-only, enforced by a database trigger; CSV export with Controls.
Certifications
&Deploy does not yet hold third-party certifications such as SOC 2. We're happy to answer security questionnaires: email security@anddeploy.com.
&

Your app is one message away from being online.