Security
Last updated: 2026-10-11
Private beta. 8pixel is in a private beta by invitation. The company is not registered yet, so the name on these pages is a working name. We do not take payments.
Security is part of how 8pixel is built and operated. This page describes actual product controls. It is not a certification claim or a promise that incidents can never occur.
Account and data protection
- Clerk handles sign-in. 8pixel does not store your password.
- Server-side access checks apply to every company and role: owner, editor, or viewer.
- Sensitive actions such as export, deletion, membership, and billing are permission-limited and logged.
- Data is sent over encrypted connections. Secrets stay server-side and are not sent to the browser.
Application protections
- We use security headers, including CSP, framing protection, a strict referrer policy, and nosniff.
- Public forms, AI surfaces, and other sensitive endpoints are rate-limited.
- Webhooks for payments, sign-in, and email are verified and handled idempotently.
- AI-generated content is validated against 8pixel's content model before it is saved or published.
Backup, export, and deletion
Owners can request an account-data export and deletion in the app. Deleting a website removes its data and files. Legal duties, such as accounting, can mean some data cannot be erased immediately. Backups and providers' own retention periods may also mean data ages out over time.
Incidents
We investigate suspected security incidents, contain impact, and notify affected customers without undue delay when we act as their processor. Where 8pixel is controller, we follow applicable personal-data breach duties.
Report a vulnerability
Send private reports to contact@8pixel.app. Do not publicly disclose exploit details, personal data, or secrets. Our machine-readable contact is also available at security.txt.
What we do not claim
8pixel is not ISO 27001 or SOC 2 certified, and we do not claim the service is error-free. We review security and privacy as the product, providers, and risk landscape change.