Security & compliance
Sensible security, on by default.
Incoming emails are rendered in a locked-down sandbox so a malicious message can’t tamper with the app. Rate limits, a strict browser security policy, encrypted secrets, and a full audit trail all come standard.
Rate limiting
ShippingBuilt-in limits stop abuse and brute-force attempts, and hold steady across restarts.
Request forgery protection
ShippingStandard protection against cross-site request forgery on every session-based action.
Locked-down by default
ShippingA strict browser security policy and enforced HTTPS in production.
Safe file uploads
ShippingUploads are checked by type and blocked if risky, with size limits (smaller for guests).
Encrypted secrets
ShippingSensitive secrets like two-factor keys are encrypted in the database.
Security activity log
ShippingA record of sign-ins, two-factor changes, password resets, and invitations.
Trusted plugins only
ShippingNo plugin installs unless it’s properly signed and trusted.
Sandboxed email rendering
ShippingIncoming HTML email is shown in a fully sealed sandbox that can’t run scripts or touch the app.
Audit log
ShippingA record of who created, changed, or deleted what, with sensitive fields redacted and a read-only role for auditors.
Want to see it in action?
Self-host the v1 image today, or browse the rest of the catalogue.