Security
Security features, configuration, and guidance.
Apps
Tagged pages in the Apps documentation.
App security
How apps handle security when using AI functionality, including data storage, routing, and LLM training policies.
Concept
Customize the Content Security Policy for apps
Configure custom Content Security Policy rules to allow or restrict behavior for your apps.
Guide
Embed a published app
Embed an app in an iframe on another site, in another app, or in a classic app.
Guide
Organization & users
Tagged pages in the Organization & users documentation.
Redact sandbox tokens from ingress access logs
Set up your network gateway to redact short-lived authentication tokens from access logs.
Guide
Queries
Tagged pages in the Queries documentation.
Row-level security
Learn about row-level security of database tables.
Concept
Self hosted
Tagged pages in the Self hosted documentation.
Configure code-executor security and privileges
Learn how to disable the default security configuration for code-executor or run in unprivileged mode.
Guide
Custom code execution security
How Retool sandboxes custom code across services and the container privilege requirements for each.
Concept
Hardened images for self-hosted Retool
Learn about hardened images for self-hosted Retool, including security changes, ARM64 support, and migration guidance.
Concept
Retool-managed deployment security
Learn about security and restrictions for Retool-managed, self-hosted deployments.
Concept
Rotate your encryption key
Learn how to rotate Retool's encryption keys.
Guide
Security checklist for self-managed Retool
A checklist of security controls to apply before and after deploying self-managed Retool.
Concept
Security environment variables
Reference documentation for security-related environment variables.
Reference
Security hardening best practices
Learn about security hardening options for self-hosted Retool.
Concept