GeezerVison is showing reflex.dev — Security - Reflex

Deploy anywhere your security requires.

Request security documentation Compare deployments

Choose Reflex Cloud, your own cloud, or on-premises app hosting. Understand the deployment responsibilities, AI data handling, and documentation that apply to your team.

Deployment

Choose where your apps run.

Hosting location and operating responsibility are separate decisions. Here is what changes with each deployment model.

Reflex Cloud

Managed app hosting

Hosting: Reflex operates the hosting service and its deployment tooling.
Your responsibilities: Your team owns application access, business logic, integrations, and the data you connect.
Confirm in your review: Confirm service terms, available regions, backups, and recovery requirements for your plan.

Read deployment docs

Your cloud

Enterprise BYOC

Hosting: Deploy apps to AWS, Google Cloud, or Azure using your cloud credentials and container runtime.
Your responsibilities: Your team controls the cloud account, permissions, network, billing, and infrastructure policies.
Confirm in your review: Agree the operating model and support scope for your chosen cloud with Reflex.

Read deployment docs

On-premises

Self-hosted framework apps

Hosting: Run the frontend and Python backend on your own servers or private network.
Your responsibilities: Your team operates servers, TLS, monitoring, backups, and updates.
Confirm in your review: Discuss private AI Builder or air-gapped requirements separately with our Enterprise team.

Read deployment docs

These options describe application hosting. Private deployment of AI Builder and the Reflex platform has its own Enterprise scope and requirements.

Controls

Make the controls fit your requirements.

Use these topics to scope your technical review. Available controls and operating responsibilities depend on the product, deployment, and agreement.

Data protection

Storage and encryption: Review storage locations, encryption, and key ownership for your deployment.
Backups and recovery: Confirm backup frequency, retention, and recovery targets with the team operating your infrastructure.
Data boundaries: Map which application data, prompts, and code leave your environment.

Product security

Application review: Use code review and the available security scan as part of your release process.
Dependencies and updates: Assign responsibility for package updates and vulnerability remediation.
Release controls: Define testing, approvals, and rollback procedures for your apps.

Enterprise security

Identity and access: Review identity-provider integration and the permissions available for your plan.
Logs and monitoring: Identify the events you need to capture and where logs will be retained.
Operating responsibility: Agree who manages infrastructure, incidents, and ongoing support.

Data privacy

Processing terms: Review the published policy and the terms that apply to your agreement.
AI data use: Confirm prompt and output handling, model providers, and training preferences.
Retention and deletion: Document your requirements across Reflex and the systems your apps connect to.

AI and data

Review each data path.

Where an app runs does not by itself determine how AI Builder, model providers, or connected services process data.

Application data

Document the databases, services, and credentials your app uses. Apply your access, storage, and retention requirements to the environment that runs it.

Builder prompts and generated code

The published Builder policy permits prompts to be used to improve the service and models, and generated output for training unless you opt out. Confirm applicable account settings and enterprise terms before sharing sensitive material.

AI providers and connected systems

Review which providers receive data, what integrations can access, and where processing happens. Agree any restrictions and retention requirements for your deployment.

Read the Builder privacy policy

Documentation

Give your review a clear starting point.

Email your deployment model, the products you are evaluating, and the documents your team needs. We will confirm what is available and applicable.

Request the material your team needs

Include assurance reports, data-processing terms, architecture questions, or a security questionnaire. Availability and scope depend on the service and agreement.

Request security documentation

Opens an email to [email protected].

Security scan

Understand the code upload, model-based review, and limits of an automated scan.

Read the technical explanation

Privacy policyPublished

Terms of servicePublished

Enterprise agreementDiscuss with our team

Privacy and terms

Read the published Builder policy, including prompts, generated output, and account controls.

Read the privacy policy

Start your security review.

Tell us how you plan to run Reflex and which documents your team needs. We will confirm the applicable scope.

Request security documentation Explore Enterprise