Script.it is built with security as a default, not an afterthought. Your data is encrypted wherever it travels or rests, scripts execute inside isolated environments that can’t reach your other sessions, and the infrastructure is designed to stay available even when individual components fail. This page describes the specific protections in place.Documentation Index
Fetch the complete documentation index at: https://docs.script.it/llms.txt
Use this file to discover all available pages before exploring further.
Data encryption
In transit
All communication between your browser and Script.it is encrypted using HTTPS with TLS 1.2 or higher. This applies to every request — API calls, file uploads, webhook payloads, and everything in between.At rest
Data stored in your workspace is encrypted at rest. This includes your scripts, session files, and any credentials you’ve connected through integrations.Credential security
When you connect an integration — Slack, Gmail, Google Sheets, or any other service — Script.it stores the access credentials in encrypted form. Your credentials are never exposed in plain text, and they’re never included in script source files or chat history. To revoke access for an integration at any time:- Go to Settings → Integrations.
- Find the integration you want to disconnect.
- Click Disconnect.
Isolated run environments
Every session runs in its own isolated environment. When a script executes, it cannot access the files or running state of any other session. This means:- Concurrent sessions don’t interfere with each other.
- A script can only read files that were produced in its own session, unless you explicitly pass data between scripts.
- The run environment is cleared after the session ends.
Workspace backups
Your workspace data — scripts, session history, trigger configurations, and connected integrations — is automatically backed up. You don’t need to configure anything for backups to work.Infrastructure
Script.it runs on Google Cloud. The infrastructure includes redundancy at multiple levels and automatic failover, so a failure in one component doesn’t bring down your automations. Scheduled triggers and webhook triggers are designed to continue operating even during maintenance windows.If you have specific compliance requirements or questions about data handling, contact support@script.it.