Skip to main content
FAQ

This section addresses common questions and provides clear, concise answers to help users quickly find the information they need. It covers a range of topics to enhance understanding and resolve frequent inquiries efficiently.

Security

Find answers to your security-related questions in this section. Learn about our data protection measures, privacy practices, and compliance standards. Get insights into how we safeguard your information and ensure a secure app-building experience.


How secure is Bubble?
How does Bubble deter and mitigate DDoS attacks?
What are Bubble’s security protocols for my app’s data?
How do I protect user data?
Can I disable SSL for my self-signed certificate in the API Connector?
What is Flusk and why should I use it?
How does Flusk benefit Bubble customers?
What are Flusk’s security standards?
How does Flusk integrate with my existing Bubble app?
What security standards does Flusk test for?
How do I get started with Flusk?
Can I subscribe to Flusk through my Bubble account or subscription?
Will Flusk slow down my app?
Can I use Flusk without technical expertise?
Can I use Flusk if I’m on an Agency plan?
How does Flusk help me stay compliant with data privacy laws?
Is there a limit to the number of apps I can secure with Flusk?
Bubble Acquires Flusk to Supercharge App Security and MonitoringEmmanuel Straschnov
If I check the "Limit access to this app in run mode with a username and password" box in the Settings tab, will this impact users trying to access my Live app?
Can I add security headers like "X-Content-Type-Options: nosniff" and "Strict-Transport-Security" to my app?
Can I enable or customize the "Access-Control-Allow-Origin" header?
Can I choose where the AWS server for my Bubble app is hosted?
What cloud hosting provider does Bubble use?
Does Bubble’s platform conduct third-party security audits and penetration testing?
Do you support multi-factor authentication and SSO?
How does Bubble encrypt user data?
How securely does Bubble integrate with external systems?
How does Bubble deter and mitigate DDoS attacks?
Does Bubble provide data backup and recovery features?
Privacy

Find answers to your privacy-related questions in this section. Learn about our data privacy policies, how we handle your personal information, and the measures we take to protect your privacy while using Bubble.


Who owns my data?
How does Bubble handle individual apps' data privacy and security?
How long are Bubble's session cookie storage windows?
Can Bubble employees access my App Data?
Flusk

Bubble has acquired Flusk, the world’s most advanced no-code security tool. Protect your Bubble app by identifying vulnerabilities with Flusk’s proactive security checks and automated error tracking.


How does the AI Privacy Rules Checker secure and process my app's data?
Does the AI Privacy Rules Checker compromise my Bubble.io app security or hack my app?
How does AI Privacy Rules Checker compare to Tinkso's Checkso tool for Bubble.io app security?
Can the AI Privacy Rules Checker detect data leaks even if my Data API is not open?
How does the AI Privacy Rules Checker access my app data?
What should I do if I discover a security breach in my app or another Bubble app?
Does the AI Privacy Rules Checker store any data from my app?
Is the Privacy Rules Checker free to use?
What security points does Flusk check for?
How does Flusk process your application data and protect your privacy?
Will Flusk slow down my app?
How can I use Flusk as an Agency?
Do I need to give access to Flusk to my app?
Does using Flusk consume Workload Units?
Should I use Flusk if I use an external backend?
How does Flusk pricing work?
How can I add a member to my Flusk app?
What is multi-version support with Flusk?
What is the Tests on Deploy Flusk feature?
What are Scheduled Tests in Flusk?
What are the different types of Flusk deployments?
What is the Flusk Analytics [Beta] feature?
What is the Flusk Error Catcher [Beta] feature?
Why am I asked to review page sensitivity in Flusk and how do I do so?
Why am I asked to review database sensitivity in Flusk and how do I do so?
How do I fix the Page Access Protection issue flagged by Flusk?
How do I fix the Public Bubble Editor issue flagged by Flusk?
How do I fix the Unapproved Collaborator issue flagged by Flusk?
How do I fix the Unprotected API Workflow issue flagged by Flusk?
How do I fix the Default Username / Password Combination issue flagged by Flusk?
How do I fix the Public Swagger File issue flagged by Flusk?
How do I fix the No Password Policy issue flagged by Flusk?
How do I fix the No Privacy Rules Defined issue flagged by Flusk?
How do I fix the Public Sensitive Fields issue flagged by Flusk?
How do I fix the Public Sensitive Parameter in API Call issue flagged by Flusk?
How do I fix the Bubble API Token issue flagged by Flusk?
How do I fix the Public Sensitive URL in API Call issue flagged by Flusk?
How do I fix the Temporary Password Vulnerability issue flagged by Flusk?
How do I fix the Clear Data in Login Action issue flagged by Flusk?
How do I fix the Test Version Protection issue flagged by Flusk?
How do I fix the Data Leak issue flagged by Flusk?
How do I fix the Unsafe Google Maps API Token issue flagged by Flusk?
How do I fix the Public File Uploader issue flagged by Flusk?
How do I fix the Public Picture Uploader issue flagged by Flusk?
How do I fix the iFrame Restriction issue flagged by Flusk?
What do I do if I fixed an issue flagged by Flusk, but it still appears as unresolved or doesn't update?
How do I find my App ID?
Why is my application pending verification in Flusk?
How do I add Flusk as a collaborator on my app?
How do I verify the ownership of my app to use Flusk Vault?
How do I add custom branches / versions in Flusk?
How do I enable or disable Bubble versions on Flusk?
How do I add a collaborator on Flusk?
Compliance

Find answers to your compliance-related questions in this section. Learn about our adherence to industry standards, regulatory requirements, and how we ensure your apps meet necessary compliance criteria. Understand our commitment to maintaining a compliant and secure environment for your projects.


Is Bubble HIPAA compliant?
Is Bubble SOC 2 Compliant?
Bubble has taken down my app for violating Terms, but I think this is a mistake. What should I do?
Is Bubble FERPA Compliant?
Terms & Conditions

Find answers to questions about our terms and conditions in this section. Understand your rights and responsibilities as a Bubble user, including usage policies, acceptable use, and legal agreements. Get clarity on the guidelines that govern your use of the platform.


Does Bubble own my application?
Does Bubble own my user’s data?
Does Bubble use my user’s data?
Can I sell my Bubble application?
What happens if Bubble closes?
What are the terms of the referral program?
Can we get a signed DPA?
How can I report abuse of the Bubble platform?
What will happen to my app if Bubble shuts down?