Security you can build on
We take the safety of your code and data seriously — here's how we protect it.
Encryption everywhere
Data is encrypted in transit (TLS) and at rest. Secrets are stored in a managed vault, never in code.
Isolated builds
Every build runs in an isolated sandbox with scoped permissions and no access to other customers' data.
Auth & access control
Role-based access across workspaces, with SSO/SAML included from the Business plan up.
Compliance
We aim to align our practices with SOC 2 principles, and we sign DPAs for teams that need them. We are not SOC 2 certified — there is no audit or report yet, and we would rather say so than imply otherwise.
Data ownership
Your code and data are yours — readable and editable in the browser on any plan, exportable by ZIP or GitHub sync on a paid plan, and deletable on request.
Responsible disclosure
Found an issue? Report it and we'll respond quickly. We credit responsible researchers.
Report a vulnerability
Email security@berrybell.ai — we respond fast.
Enterprise security review?
We'll walk your team through our controls and sign a DPA.