This document is an overview of how we provide best-in-industry security for you. We'll cover all the important areas in the lifecycle of your data:
Product Security: how we ensure only you can create and view apps that access your data
Network and Application Security: how we ensure your data is protected when it is in our cloud
Ongoing Operations: how we stay good stewards of security best practices
Product Security
SSO
All access and sign-ins to Streamlit are conducted via an SSO provider: GitHub, GSuite, and many other platforms are supported. We can work with your IT team to integrate to your provider of choice. We do not store customer passwords.
Credential Storage
We encrypt sensitive customer data (e.g. secrets, authentication tokens) at-rest with AES256 as described in Google's documentation.
