Security

Production boundaries before automation gets power.

CodeY keeps customer runtime code separate from platform secrets. OpenAI, SSH, SFTP, registry, DNS, and deployment credentials stay in the platform control plane.

Isolated sites

Each generated website receives its own runtime, database settings, storage prefix, audit trail, and deployment target.

Reviewed publishing

AI output must pass validation and preview before the customer publishes a hosted site.

Restricted media

R2/S3 media keys are scoped by website prefix so generated sites cannot browse or modify another customer's files.