Security

How UseSQLite protects accounts and customer databases.

Current safeguards

• TLS for dashboard, API and SDK traffic.
• Hashed passwords and API keys; secret keys are displayed only when issued.
• Separate read-only and read-write database keys.
• Private control-plane access and private off-site backup storage.
• Encrypted Fly volumes, restricted deployment credentials and automated health checks.

Your responsibility

Keep API keys and connection strings server-side, grant the minimum scope required, revoke exposed keys promptly, use unique account passwords and export critical data on your own recovery schedule.

Responsible disclosure

Send suspected vulnerabilities to support@usesqlite.com with “Security” in the subject. Do not access other users’ data, disrupt availability, use automated destructive tests or publish details before we have had a reasonable opportunity to investigate. We will acknowledge reports as quickly as practical.