01
Authorization boundaries
Agent deploy uses one-time pairing sessions; uploads are allowed only after the user confirms the project in the browser. Trusted device credentials can be revoked anytime in the console.
Trust center
We don't treat “AI automation” as a reason to skip security boundaries
How PocketBay handles build isolation, container permissions, environment variables, access logs, user authorization, legal entity, and support channels.
Defense in depth
Layered boundaries from Agent auth to container runtime
The following describes high-level controls currently implemented. They are not absolute security guarantees and do not replace your responsibility for your own code and dependencies.
02
Build isolation
All build sources share concurrency, memory, and time limits, with isolated networking to reduce impact on the host and other apps.
03
Runtime isolation
User containers use dedicated networks, block direct container-to-container communication, limit PIDs, and drop all Linux capabilities by default before restoring minimal permissions.
04
Sensitive configuration
Public-prefix env vars may enter frontend builds; other secrets are injected at runtime only, avoiding write into image build layers.
05
AI data boundaries
User-controlled content such as logs and errors is marked untrusted so platform Copilot does not treat app output as system instructions.
06
Observability & audit
The platform records builds, deploy status, and gateway metrics; public app traffic has paths and sensitive query params redacted, and plaintext IP is not used as a product analytics field.
Public responsible entity
- Operating entity
- PocketBay Technologies Limited
- Support & complaints
- support@pocketbay.com
- Public policies
- Terms of service, privacy policy, acceptable use, copyright & abuse handling, support policy
Responsible disclosure
Found a security issue? Please report responsibly.
Do not access other users' data, disrupt production services, or disclose unfixed details publicly. Send reproducible steps, impact scope, and suggested fixes to the support email.
Submit security report →