Your account
- Signed in as you
- Owner of your business
Four ways Foundable keeps it safe
Your business
- Checked on every request
- Checked again by the database
Another account
- Turned away by our servers
- Turned away by the database
Sign in with
Your sign-in
- Expires on its own
- Checked on every request
Your session
- Kept in a protected cookie
- Hidden from web pages' code
Each build
- Its own walled-off space
- Its own saved copy
A build reaches
- The AI that writes the code
- The library of code it builds with
Everything else
- Out of reach
Our test copy
- Runs every update first
The live app
- Each change shown first
- Checked as it goes live
Earlier versions
- Ready to go back to
Built in for every account
Every plan, free included, gets the same protection, with nothing to switch on.
Sign-in without a password
Google, Apple or a code sent to your email. There is no Foundable password to steal.
A sign-in that expires
Signing in gives you a short-lived sign-in pass, which our servers check on every request. A cookie alone never signs a request in.
Ownership on every request
Before Foundable shows or changes anything, it rechecks that the business is yours.
Checked by the database too
The database itself lets an account reach only the businesses it owns.
Keys kept secret
Our own keys are held in a locked store, never on disk, in the browser or in logs.
Limits on repeated requests
Our servers limit how many requests each address can send.
Secured layer by layer
Each layer has its own protection, from the network that serves your website to the database that keeps your records.
Every published website is served from a worldwide network of servers, and a website's own code runs apart from every other website's.
- Served from a worldwide network
- Its code kept apart
- Every version stored
The app, its servers and Ted's workers run in the United States, each holding only the keys its job needs. Everything from your browser comes in through one front door.
- Hosted in the United States
- One front door
- Only the keys each part needs
Every website is built in a walled-off space of its own, which reaches only the few services its job needs.
- A walled-off space per build
- Reaches only what it needs
- Work saved as it goes
Your records, files and backups are encrypted where they're stored, every connection to the database is encrypted, and backups can restore any moment of the last 14 days.
- Encrypted where it's stored
- Encrypted on its way
- 14 days of backups
For founders
Building your first website? You're already covered.
Every website Ted builds for you gets the same care, with nothing to set up.
- Ted builds every website in a walled-off space of its own.
- It's served from a worldwide network of servers, and its own code runs apart from every other website's.
- A website that keeps its own data gets a database of its own, apart from every other website's.
- Your customers pay into a Stripe account in your name, and Foundable never holds your Stripe password or keys.
Your data, your rules
Your business stays yours: kept out of AI training, deleted when you say, disconnected when you choose.
Kept out of AI training
Foundable never trains AI on your content. The AI companies behind Ted's replies and Build's websites don't train on it either, under their business agreements.
- What we delete
Deleted when you say
Delete your account in Settings, then Account: it and every business you own are erased right away, for good, so save anything you want to keep first.
Disconnected when you choose
Disconnecting a social account, an app or your Stripe account ends Foundable's access. We keep only a note of which account was connected, never its password or keys.
Read it in writing
The policies behind this page, for your own review or your team's.
- Security policyHow Foundable is built, run and watched.
- Data Processing AgreementOur data terms, part of our Terms for every account.
- SubprocessorsEvery provider, what it receives and where.
- Privacy PolicyWhat we collect, and why.
- Responsible disclosureHow to report an issue, and what's in scope.
Need a security questionnaire answered? Write to security@foundable.com.
Questions
No. Foundable never trains AI on your content. The AI companies behind Ted's replies and Build's websites don't train on it either, under their business agreements.
In the United States. Your records and files are encrypted where they're stored, and a website's own data is kept apart from Foundable's and every other website's, in the same place.
Only your account. Every request checks that the business is yours, the database checks again on its own, and support access never makes anyone a member of yours.
Foundable's own keys are held in a locked store and are never written to disk, to the browser or to logs. For an app you connect, the provider that manages the connection holds its sign-in, and Foundable keeps only a note of which account was connected.
We look into it and contain it, tell the customers it affects promptly, and share what happened, who it touched and how we fixed it as we learn. Service problems are posted on our status page.
Yes. Open Settings, then Account, and choose Delete account; it takes effect at once. Our data deletion page explains what is removed.
Through Stripe. Your customers pay into a Stripe account in your name, and Foundable keeps only a note of which Stripe account is connected, never its password or keys.
Email security@foundable.com. Our responsible disclosure policy explains what's covered, and we aim to get back to you within 3 business days.
Ted’s ready. Are you?
Everything on this page comes with your account from day one.