Snapshot 209828

Document
Security page
URL
https://www.growthbook.io/platform/security
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
98058 bytes
SHA-256 (raw)
a0f812ac364ee71376fb6a0256c46b2f542f819ecfc49d834c10dcb9ee0c8e40
SHA-256 (normalized text)
cc6b26d4038df0666a0ecdb57ddf3c0749df7ccd35daa50611ce36a1711e509b

Normalized text

Scripts and page chrome removed; this is what change detection compares.

GrowthBook 5.2 | Interleaving and Human in the Loop for agents →
See what's new
Security methods and practices
GrowthBook is SOC 2 Type II certified and compliant with GDPR, COPPA, and CCPA. Our warehouse-native architecture is secure by design. Data is encrypted at rest and in transit.
Total data privacy: no PII ever leaves your data warehouse; only aggregate data is accessed.
Enterprise governance features: SSO/SAML, fine-grained permissions, role-based access, and audit trails.
Self-hosted and air-gapped: deployment options available for complete control of your infrastructure.
See Trust Center
Deployment option security profiles
Our tools and methods follow industry best practices for all cloud and self-hosted accounts.
GrowthBook Cloud
Data and infrastructure security for cloud services
Automatic updates and security patches
Encrypted data at rest and in transit
Hosted by GrowthBook on AWS
99.99% uptime SLA (Enterprise)
Getting Started
Self-host GrowthBook
Your infrastructure with your security and privacy rules
Full control of updates, scaling, and infrastructure
No data or PII leaves your system, HIPAA compliant
Deploy air-gapped on all major clouds or on-prem
Single service deployed with Kubernetes or any container platform
View Docs
Fully managed warehouse option
Available with GrowthBook Cloud, our managed warehouse option requires no data warehouse provisioning or customer data platform setup. Event data is securely stored on ClickHouse infrastructure, SOC 2 Type II certified, and data encrypted at rest and in transit.
Start for Free
Open-source transparency and community visibility
Open-source code review
Our code is open and regularly reviewed for security vulnerabilities. We use both static analysis and regular security reviews and testing.
View on GitHub
Application security
GrowthBook does mandatory code reviews for every PR, security reviews, and routine penetration testing. If you discover a security vulnerability, please disclose it to us responsibly.
Disclosure Process
Report a Vulnerability
Ready to ship faster?
No credit card required. Start with feature flags, experimentation, and product analytics — free.
Get Started
Book a Demo