Security

Built for trust

Multi-tenant by design. Your secrets, certificates and source URLs are isolated per organization with strict RLS enforcement.

SOC2-ready posture

Audit logs, MFA, device sessions, least-privilege roles from day one.

AES-GCM at rest

Keystores, certificates and integration tokens encrypted with rotating keys.

Signed everything

OTA manifests signed with Ed25519. Webhooks HMAC-verified. Builds checksummed.

Your website, on every phone in the world.

Start free. Ship your first Android & iOS build in under 10 minutes.