Every Site, Elevated.

Docs

How Your Data Is Protected

Our Commitment

MountDev Ops is built security first. Your business data belongs to you, and you can export all of it at any time. We never use analytics or tracking of any kind inside MountDev Ops.

Your Company Has Its Own Database

Every company that uses MountDev Ops gets its own separate database, its own file storage, and its own encryption key. Your data is never stored in a shared database alongside other companies' data, and nothing in MountDev Ops can read two companies' data at once.

Where Your Data Is Stored

Your data is stored in the United States, or in the European Union if you choose, in Cloudflare's guaranteed data regions. The United States is available now; the European Union is coming soon. Your workspace's database runs and stores its data only in its region, and your files are kept in that region's own file storage (Data Region).

This guarantee is provided through Cloudflare's data regions. Services your company connects, and our support team, may process data elsewhere under our Data Processing Agreement. Two more things to know: Cloudflare logs the internal identifiers of your workspace's storage outside the region for its billing, and your pages are delivered through Cloudflare's global network, so they load quickly wherever you are.

Encryption

  • In transit: every connection to MountDev Ops uses HTTPS, including the live connection that keeps your screens up to date.
  • At rest: your database and files are encrypted on disk by Cloudflare, which runs the servers MountDev Ops is hosted on.
  • Your own key: on top of that, your company's data is encrypted with a key that belongs to your company alone. Only your company's own workspace can use it.

MountDev Cannot Open Your Data

We host and manage MountDev Ops, and we built it so that we cannot see what you store in it.

  • No staff access: none of our staff screens, tools, logs, or admin pages can show your records. There is no "log in as the customer" button.
  • What we can see: your version, whether your workspace is healthy, how much storage you use, and the counts we bill on. We never see the records themselves.
  • No record contents in logs: error reports and logs never include what you have stored.
  • Proven on every release: before any update is published, automated tests confirm that no page, tool, or connection returns your data unless someone from your company is signed in.

Email to Your Support Addresses

When Helpdesk takes in email for your company, the message goes straight to your company's own database, unread along the way and never logged. MountDev only records which of your addresses deliver to your workspace. Replies go out from your own addresses.

One Helpdesk link reaches your workspace without a sign-in, and it does one thing only:

  • Upload links you send a client add their files to that one ticket. Each link is signed so it cannot be forged, expires, and can be turned off at any time.

Your Website Forms

Each form you build in Forms has a public address, so visitors to your websites can send it without a sign-in. The address is signed so it cannot be forged, and it does one thing only: it shows that one form and adds submissions to it. It never reads anything else in your workspace. Spam protection uses your own Cloudflare Turnstile keys, with the secret stored encrypted and opened only to check a submission. Visitors' internet addresses are never stored: the hourly limit counts a scrambled form of them that changes every day and is forgotten after two days.

Files on tickets are kept in your company's own database, and open only for people signed in to your workspace who may see the ticket.

Your Files

Files in the Files app and on any record are encrypted with your company's own files key before they are stored, and stored under random names that never include the file's name or your company's. They open only for someone signed in to your workspace who may see a record they are on, and every download and preview is written in your Activity Log. The one exception is a file or folder your company publishes for its websites, which anyone with its link can see until you turn the link off; publishing is off until an owner or admin turns it on (Files on Your Websites). No MountDev staff screen, system, or AI agent can open them (How Your Files Are Encrypted).

If You Want Our Help Inside Your Account

Sometimes you may want us to look at something with you. You stay in control:

  • An owner or admin of your company grants a named person at MountDev temporary access, for a set length of time.
  • You can end that access at any time.
  • Everything that person does is recorded in your activity log, which only your company can read.

Without that grant, nobody at MountDev can get in.

Updates Never Change Your Data

We update MountDev Ops regularly, and updates never remove or change what you have stored:

  • Additions only: updates can add new things, like new fields or new features. They never delete, rename, or rewrite your existing data, and an automated check blocks any update that would.
  • Tested against sample data: before an update is published, it runs against a full set of sample company data. Every existing record must come through exactly unchanged, or the update is stopped.
  • Restore point first: your workspace gets a restore point before every update.
  • Your choices stay yours: your setup, including your modules, fields, automations, and layouts, stays exactly as you made it. New features arrive as options you can turn on.

Your Data Is Yours to Take

You can export all of your data at any time. There is no lock-in. An owner of your company selects Export Everything on Settings and gets every record, file, and conversation in one download, in folders anyone can follow, with spreadsheets that open in Excel and Google Sheets (Export Everything). Passwords, keys, and other secrets are never part of it.

No Tracking

MountDev Ops has no analytics, tracking pixels, or third-party scripts watching what you do. The only outside service the workspace can load is our own support chat, and only when you open it.