Snapshot 246867

Document
Security page
URL
https://appwrite.io/docs/advanced/security
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
181802 bytes
SHA-256 (raw)
5895cb9f258e9a3a049fbcb443c88337392ea6b2a51e24ed5eccdea5bfd4f56f
SHA-256 (normalized text)
7bb61a6de6c99fc2e48ecbcc985836657eb6a760b4134ea14d179f11e169ca6e

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Just launched
MCP1 by Appwrite is liveMCP1 by Appwrite: one URL for every MCP server_
Try MCP1
Skip to content
Security
Appwrite helps you build secure apps by applying various security and compliance measures. Appwrite is compliant with GDPR, CCPA, HIPAA, and SOC 2.
Appwrite also employs enhanced password protection and encryption, rate limits, robust permission systems, and HTTPS/TLS to protect you and your users' data.
Compliance
The safeguarding of your and your users' data is taken seriously at Appwrite. Appwrite works to achieve compliance with a variety of standards to protect sensitive data, as well as maintain trust and credibility.
GDPR
Appwrite is GDPR compliant. Learn about our measures, privacy policy, and find our data processing agreement.
PCI
Appwrite uses Stripe to handle payment and payment information securely. Learn about Appwrite's PCI compliance.
SOC 2
Appwrite is SOC2 Type I compliant. Learn about Appwrite's measures to meet SOC 2 standards.
HIPAA
Appwrite is HIPAA compliant. Learn about Appwrite's measures to protect personal health information.
CCPA
Appwrite is CCPA compliant. Learn about our measures to protect consumer privacy under the California Consumer Privacy Act.
Measures
Appwrite employs a variety of measures to help you build secure applications, faster. Learn about the different ways Appwrite protects you and your users' data and privacy.
Authentication
Secure authentication methods to protect your users and promote better passwords.
Encryption
Appwrite encrypts sensitive data and files in Appwrite Databases and Storage.
Multi-factor authentication
Add a second layer of protection by requiring users to verify their identity with multiple factors.
HTTPS
Appwrite Cloud enforces HTTPS on all endpoints to prevent on-path attacks like packet sniffing.
TLS
Appwrite assigns TLS certificates on all Appwrite and user provided domains connected to Appwrite.
Backups
Appwrite Cloud uses regular backups to prevent data loss and improve resiliency.
Penetration tests
Appwrite employs regular third-party penetration tests to find vulnerabilities.
Audit logs
Appwrite provides detailed audit logs for each product to track and discover suspicious activity.
Abuse protection
Appwrite protects against common abuse methods like DoS and brute-force attacks.
Access control
Appwrite is secure by default and provides tools for you to manage access control and prevent abuse.
Permissions
Control which users can access which resources.
Roles
Learn about Console organization member roles and the access each one grants.
Rate limits
Appwrite has rate limits on some endpoints to prevent abuse.
API keys
Create and manage API keys used by Server SDKs.
Configuration
Pass constants and secrets to your Appwrite resources.
Environment variables
Use project, function, and site environment variables to pass constants and secrets to your Functions and Sites.
Reporting vulnerabilities
If you discover security vulnerabilities, please contact us at security@appwrite.io. Please avoid posting a public issue on GitHub or elsewhere online to prevent malicious actors from abusing the vulnerabilities before the Appwrite team has chance to patch the issue.
Was this page helpful?
Share what worked or what we should fix. Once approved, our agents automatically apply suggested updates to the docs.