---
title: "Security — how Dashfridge keeps AI-made dashboards locked down"
description: "AI-made dashboards are code. Dashfridge runs every one in a sandbox on a separate address, blocks network calls, keeps logins away from dashboards, and makes a person publish."
url: https://dashfridge.com/security
site: Dashfridge (https://dashfridge.com)
---

Security

# AI-made dashboards are code.  
We treat them that way.

Emailing an HTML file means everyone opens a small program on their own computer. On Dashfridge, every dashboard runs locked down, so your team can share freely without a security committee.

## Every dashboard is treated as untrusted

An AI-made dashboard is a small program. We assume any one of them could misbehave, so the safety comes from where it runs, not from trusting what's inside.

## It runs on a separate address

Dashboards are shown from content.dashfridge.com, never from the address you sign in on. Your login cookie is never sent there, so a dashboard can't read or use it.

## Locked in a sandbox

The browser runs each dashboard in a sandbox with no access to the page around it, no cookies and no stored data. It can't reach into Dashfridge or into other dashboards.

## No calling out to the internet

A dashboard can't make network requests, post forms or load images from outside sites, so it can't quietly send your numbers somewhere. Charts can still use a short list of well-known chart libraries.

## Short-lived viewing links

Each time someone opens a dashboard, the dashboard loads through a signed link made for that dashboard and version, and it expires after five minutes. The link you share with your team is the Dashfridge page, which needs a sign-in.

## A person always publishes

Anything sent by an AI tool or the API arrives as a draft. Nobody sees it until someone on your team clicks Publish, unless an editor chose auto-publish for updates to a dashboard they already published.

## Your AI acts as you, nothing more

When you connect an AI tool, it can only do what your own account can do. It can't publish, delete or change who can see what.

## Private magnets stay private

On private magnets, people without access can't see the dashboards at all, not even their names. Downgrading never makes a private magnet public.

## Where your data lives

Dashboards and account details are stored with these providers. Deleting a dashboard deletes its files. Sign-in goes through Google, Microsoft or email; we never see your password for those accounts.

| Provider   | What for                                                       | Where                  |
| ---------- | -------------------------------------------------------------- | ---------------------- |
| Vercel     | App hosting                                                    | United States          |
| Neon       | Database (accounts, workspaces, dashboard details)             | United States          |
| Cloudflare | Dashboard file storage (R2) and thumbnails (Browser Rendering) | United States / global |
| WorkOS     | Sign-in                                                        | United States          |
| Stripe     | Payments (we never see full card numbers)                      | United States          |

More in our [privacy policy](https://dashfridge.com/privacy). Found a problem? [Tell us](https://dashfridge.com/support).

## Share freely. It's locked down.

Free for your first 3 dashboards. Your team joins with their company email. No BI tool required.

[ Start free with your work email](https://dashfridge.com/sign-up)