Security
How GenMB protects your account, your keys and your apps.
Signing in
You sign in with Google, company single sign-on (Business), a one-time email link, or an email and password. Sessions expire after 30 days.
Encrypted connections
GenMB and every published app are served over HTTPS. Published apps also tell browsers to always use HTTPS.
Your keys and secrets
Connected-account tokens and the secrets your app’s server functions use are encrypted before they are stored, and those secrets are only read on the server.
Payments
Payments go through Stripe. Your card details are entered on Stripe and never stored by GenMB.
A security check on every build
Every app GenMB builds is scanned for common security problems, such as exposed secrets, cross-site scripting and injection, and GenMB fixes serious findings while it builds. The check runs again when you publish.
Your users’ data
Apps can keep each signed-in user’s data private to that user, and tables owned by a user reject requests from anyone who is not signed in.
Where your data lives
GenMB’s servers and main database run on Google Cloud in the United States.
Deleting your account
You can delete your account and its data at any time from Settings.
Report a problem
Found a security issue? Email team@genmb.com. See also our Privacy Policy.