Security and privacy
How Appmake protects your account, your apps and your customers' data.
Your data
- Appmake never trains AI models on your projects, your data or your customers' data.
- Data is stored in the EU.
- Data is encrypted in transit and at rest.
- We sign a GDPR data processing agreement with you on request.
- Ask us to delete your data, and it is deleted within 30 days.
Protect your account
In Settings → Security you can turn on two-factor authentication with an authenticator app, add passkeys, get an email when someone signs in from a new device, and sign out sessions you don't recognise.
Keys and secrets
API keys you give Appmake are stored in an encrypted vault per workspace. They are never shown in the chat, written into the code or included in exports. Kalle Browser never sees your passwords: sign-in pages are handed back to you.
Audit log
On Enterprise, every sign-in, change, invite, payment and key is recorded in the audit log for a year. Export it as CSV or stream it to your SIEM.
Report a problem
Found a security issue? Email [email protected]. We reply within two working days.