Every change is saved, tried on a private test copy, and only reaches your users when you say so. If something isn't right, going back is one sentence.
Every app has two copies. The test copy is just for you and anyone you share the link with. The live copy is what your users see. They keep their information completely separate, so testing never touches real customers or real data.
Tell Claude "put it live", or press the button in your dashboard. Claude can't do it on its own, and when you connect it you choose whether it's allowed to at all.
If a change would leave information open to strangers, it can't go live until it's fixed. You'll get a plain-English explanation, and Claude can fix it for you.
If an update changes how your information is stored, we take a backup first. Visitors switch to the new version all at once, never halfway.
Every version is kept, along with what was asked for and who asked. If the newest one isn't right, say "bring back the previous version" and Claude puts it back live.