Security
An overview of how Teploy is designed to keep your code, credentials, and deployments safe.
Platform security
Teploy is built for teams that deploy production workloads. Access to the control plane is authenticated and authorized per workspace role. Sensitive credentials such as repository tokens and webhook secrets are encrypted at rest.
Access control
Workspaces support role-based access (for example Owner, Admin, Dev, and Viewer). Application-scoped invites limit collaborators to specific projects. Enterprise workspaces can configure additional controls such as IP allowlists and SAML single sign-on where enabled.
Deployment isolation
Applications run in isolated containers on compute hosts assigned to your environment. Environment variables and secrets are injected at deploy time and are not exposed in public deployment URLs.
Network and routing
Public traffic is routed through managed edge infrastructure (including load balancer and TLS termination) rather than exposing raw host endpoints. Custom domains use verified DNS and HTTPS listener configuration.
Monitoring and audit
Teploy records deployment activity and selected administrative actions to help teams investigate changes. Observability and audit features vary by plan and workspace configuration.
Reporting issues
If you discover a security vulnerability, contact us using the details at the bottom of this page. Do not disclose issues publicly until we have had a reasonable opportunity to investigate.
Contact
For questions about these policies, security reports, privacy requests, or your account, reach us at hello@teploy.io.