Security
Your code and data are the whole point of the platform. Here is how ShipSanely handles them — and what we do not do.
PostgreSQL and Redis are never reachable from the public internet. Only hosted application endpoints are exposed, behind managed TLS.
Data is encrypted in transit and at rest, including backups. Secrets you set are stored encrypted and injected only into the services that need them.
The agent requests read access to repositories you explicitly connect. It never commits to your repository or modifies source code.
Each customer's app servers, databases and caches run in isolated environments. No shared datastores between tenants.
Every deployment, provisioning step and repair action is recorded with time, cause and outcome, and is visible to you.
Repository contents are used only to operate the service for you. They are not used to train models without your explicit consent.
If you believe you have found a vulnerability, email hello@shipsanely.com with details and reproduction steps. We acknowledge reports promptly and will not pursue action against good-faith research.
Formal certifications are planned as the platform leaves early access. Ask us about our current controls and timelines during onboarding.