Security

Your passwords and keys stay yours.

The person you hire works inside your app, but they never see your login details, your API keys, or your passwords. Here is what they can see, what they can never see, and what this does not protect.

What the person you hire can see

Your app's code, and the changes they make to it.
They can open the app, run the agent, and build and deploy it.
Your app's data — the records your app stores.

What they can never see

The contents of your credentials. Every app's credentials are stored encrypted, and the product never shows a password or key back to anyone — not to the person you hire, not in the browser.
They can see which credential names exist, whether each one is filled, and who may use it. The API returns that much, and never a value.
They cannot add a credential to your app. They can write code that refers to a credential by name, but only you can add the value, and their code can use it only after you do.
Your private uploads — the files you marked private.
Nothing they write changes that. The platform refuses them the contents of a credential on every code path, whatever that credential's setting says.

How the work and the money are handled

You agree the work and the estimate before anything starts. The platform sets that amount aside from your balance first, so it cannot be spent elsewhere.
You can stop the work at any time.
Every bill needs your approval before any money moves. Sending a bill pays nothing; approving it releases the amount that was set aside.
Every change is recorded in the app's history, and anything you write in the app's chat is part of that history.

What this does not protect

The person you hire can see your app's code and its data. That is by design, because that is the job.
If you paste a password or a key into the app's chat instead of adding it in Settings → Secrets, none of this protects it.
Filtering of the code the person writes is best-effort. It is a safeguard, not a guarantee.
AppHandle does not yet hold a compliance certification.

If something looks wrong

Contact support and tell us what you saw. The record of who touched what is kept, so we can look at it with you.

Contact support