Security

Security is an important part of how we think about the products we design and build. The specific controls and practices for any given app will depend on its use case, data sensitivity, and platform features.

Our general principles

  • Use platform best practices for authentication and storage.
  • Limit access to only what the app actually needs.
  • Prefer secure, encrypted channels for data in transit.
  • Keep dependencies and platforms up to date.

For apps that handle especially sensitive data or operate in regulated industries, we’ll work with you to define additional requirements and ensure the security model matches the risk profile.