Snapshot 247517
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Built on Bubble SECURITY Build secure full-stack apps with Bubble Bubble is a full-stack development platform for enterprise-grade apps. It enables you to establish security at every layer of the stack, including building a secure infrastructure, implementing privacy controls, detecting errors, and more. Learn more about security at Bubble. SECURITY DASHBOARD Scan your app for security issues The built-in security dashboard scans your app and flags vulnerabilities so you can fix issues before they become problems. Automated security scans Run on-demand or scheduled scans that inspect your elements, workflows, settings, and plugins for common security gaps. Privacy rules checker Automatically review your privacy rules to catch gaps that could leave data exposed unintentionally. Step by step solutions Every issue comes with clear remediation instructions so you know exactly what to fix in Bubble to lock things down fast. SOC 2 and GDPR Bubble complies with the SOC 2 Type Il standard for security and offers a GDPR-compliant data processing agreement (DPA). We are constantly improving our security program to stay ahead of the curve. Meet Bubble’s hosting platform Infrastructure hosting Bubble hosts its infrastructure on Amazon Web Services (AWS), which is SOC 2 Type II, CSA CAIQ, and ISO/IEC 27001 compliant. Data encryption Your data is safeguarded in transit with TLS and at rest with AES-256 encryption through RDS. Best-in-class security Scale confidently with enterprise-grade security. Bubble is SOC 2 Type II compliant, pen-tested, and meets GDPR standards. Companies of all sizes build with Bubble TESTIMONIALS Trusted by industry leaders "Managing an enterprise-level app with tens of thousands of users puts data security at the top of our mind. Bubble makes it easy to keep data secure through easy-to-understand privacy rules and data encryption." Justin Kyser Director of Innovation, LRS Healthcare 1 / 5 Build secure apps with out-of-the-box features Built-in user authentication Safeguard user data with password hashing, salting, and encryption. Confirm emails securely, set up 2FA, integrate SSO, and more. Error logs and version control Resolve issues quickly with an error-tracking dashboard, plus point-in-time data and version recovery. Custom privacy rules Protect sensitive data with customizable privacy rules. Easily define visibility and access settings for all your data using natural language. Vulnerability testing Ensure security with automated code testing, vulnerability testing (including OWASP Top 10), and continuous monitoring technologies. DDoS protection We combine our in-house protection system with Cloudflare to block attacks. Security checks We provide periodical real-time security checks to audit your apps safety. Learn more FOR ENTERPRISE Scale with confidence Businesses use Bubble’s Enterprise plan to protect their internal tools and customer-facing applications with best-in-class security. Establish maximum reliability Option to purchase a dedicated AWS instance with your choice of hosting region. Manage users with SSO Admins have the ability to streamline user management with SSO account provisioning. Configure advanced DDoS protection Organizations can customize Cloudflare configuration for advanced protection. Frequently asked questions How secure is Bubble? Bubble complies with the SOC 2 Type II standard for security and offers a GDPR-compliant data processing agreement (DPA). What cloud hosting provider does Bubble use? Bubble hosts its infrastructure on Amazon Web Services (AWS), which is SOC 2, CSA CAIQ, and ISO/IEC 27001 compliant. Can I choose where the AWS server for my Bubble app is hosted? If you’re on an Enterprise Dedicated plan, you can specify the region where your server and data are located from Bubble’s growing list of AWS data center regions (found here). Otherwise, for all other app plans, Bubble’s servers and data are hosted on AWS West Region. More information about how apps on the main cluster are hosted can be found in this article. Does Bubble’s platform conduct third-party security audits and penetration testing? Bubble conducts automated code testing, vulnerability testing (OWASP Top 10), and continuous monitoring technologies. We also conduct pen tests a minimum of annually following OWASP WSTG. Do you support multi-factor authentication and SSO? All Bubble users can enable two-factor authentication (2FA) on their account. The Enterprise plan allows admins to streamline user management with SSO account provisioning. How does Bubble encrypt user data? Your data is safeguarded in transit with TLS and at rest with AES-256 encryption through RDS. How securely does Bubble integrate with external systems? Bubble can connect with any system through the API Connector, which is compatible with a variety of secure authentication methods such as OAuth, Bearer Auth, Basic Auth, and more. How does Bubble deter and mitigate DDoS attacks? Bubble apps are configured to minimize DDoS attack surface, following the principle of least privilege with our standard API configurations. For more information on API security, please see our technical documentation. Bubble uses Cloudflare and an in-house system to monitor, track, and block even the most granular attacks. By hosting an app on Bubble, you benefit from industry-standard DDoS protection as well as support from our team in the event that any concerns arise. Does Bubble provide data backup and recovery features? Bubble uses point-in-time backups to enable recovery for Bubble apps and their underlying databases. Make your application secure from day one 6M+ Bubblers are keeping their users safe. Product AI Mobile Design Data Logic Collaboration Security Status Release notes Bubble for Founders Developers Agencies Enterprise Discover How Bubble works Examples Bubble is Global Pricing Learn Academy Technical guides Blog How to build Coaching Resources Connect to AI Marketplace Templates Plugins Experts Bootcamps Certification Partnerships Affiliates Figma to Bubble Community Bubble community Forum Newsletter Podcast Ideaboard Early access Company About Careers Brand guidelines Support Contact us Legal Terms Privacy © 2026, Bubble Group, Inc. All rights reserved. Pricing Enterprise Contact sales