Base44 handles a lot of security for you out of the box, including data encryption, SOC 2 compliance, and platform-level protections. You do not need to be a security expert to build a safe app on Base44. That said, every app is different, and some settings depend on how your app is built and who uses it. The information below walks you through the things worth checking to make sure your app is set up the right way for your situation.
App security
These features are available to all Base44 users and apply at the individual app level.
Platform security
Base44 handles these at the platform level. No action needed on your part.
- SOC 2 Type II certified, confirmed by independent audit
- ISO 27001 certified, with Base44’s own certification
- GDPR compliant, with a Data Processing Agreement available on request
- Data encrypted at rest and in transit
- Data residency controls (Elite and Enterprise plans), with the option to store your app’s data in the EU, UK, or US. Learn about data residency
- Penetration testing, conducted regularly by internal and third-party teams
- Bug bounty program for responsible vulnerability disclosure
- PCI DSS-certified payment processing for apps that accept payments
- Subprocessor directory listing all vendors who handle your data
For full details on Base44’s security practices, certifications, and compliance, visit the Base44 Security Trust Center.
Enterprise security
The following features are available on Enterprise plans only.