# Security at Codemind

## How Codemind handles your code and account

Your workspace is isolated. Every request is tied to your workspace, and one workspace can never read another's builds or files.

Access is by a token you hold. Your agent authenticates with a token for your workspace. Suspending or deleting a workspace takes effect on the next request.

Setup does not put your token in a project file. The setup prompt keeps it in your shell profile and the config file only references it.

Webhook secrets are encrypted at rest (AES-256-GCM).

Errors shown to you are written for you. Internal details and stack traces are never returned to a caller.

Retention. We keep your data for the life of your account and delete it on request.

Rate limits protect the service. Running builds and builds per hour are capped per plan.

## Report a problem

Email support@codemindhq.dev. Please include what you saw and the time. We read every report.