Security | Depot
Security for software delivery.
From single-tenant compute to encrypted cache storage, every build runs on infrastructure designed to protect your code and data.
Security Features
Built for isolation.
Single-tenant compute
Each build and CI run is fully isolated from all other compute in a dedicated VM.
Encrypted communication
All communication between clients, APIs, and builders is protected with TLS encryption.
Secure storage
Ephemeral and durable data storage is encrypted at rest using cloud-provider encryption services.
Compliance
Depot is SOC 2 Type 2 compliant and maintains security controls designed to protect customer data, infrastructure, and operational processes. Organizations can request additional security documentation directly from Depot.
SOC 2 Type 2 compliant
Documented security controls and procedures
Continuous security monitoring and auditing processes
Ongoing investment in security and compliance programs
Data Privacy
Your code stays yours
Depot does not access your builders or cache volumes unless you grant explicit, time-bound permission for debugging.
Customer-controlled access
Manage organization members, projects, and trust relationships directly from the Depot dashboard.
BYOC deployment options
Deploy the compute and data planes into your own AWS account.
FAQ
Quick answers before you check out.
- Are builders and runners shared between customers?
- How is data encrypted?
- Does Depot support OIDC?
- How are secrets stored?