How Mousepad keeps your sites safe
The basics a small business shouldn't have to think about, handled for every site you publish.
Security practices
HTTPS everywhere
Published sites and the studio are only served over HTTPS, so every visit is encrypted.
Hosted on AWS, encrypted at rest
Sites, files, and databases run on Amazon Web Services. Stored data and files are encrypted at rest, and backups use their own encryption key.
Backups for every published site
Daily backups on Basic sites, hourly on Standard and Enterprise, kept for 7 to 30 days depending on the site type.
Accounts with confirmed email
Every account confirms its email address or signs in with Google. Only a workspace owner can change its plan, billing, or domains.
Plans paid through Stripe
Your Mousepad plan is paid on Stripe Checkout, so card details never reach Mousepad's servers.
Your data stays yours
Going over a limit pauses new writes; it never deletes your data. You can unpublish or delete a site whenever you choose.
Report a security issue
If you think you've found a security problem in Mousepad, email support@mousepad.app with the details and how to reproduce it. Please don't test against sites that aren't yours.