# Is Antideploy safe and legit?

URL: https://antideploy.com/blog/is-antideploy-safe-and-legit

Here are the facts you can check: who runs it, where your data lives, how secrets are handled, and what it does not promise.

## At a glance

- **A small team**: A young platform, with a person who answers email
- **Secrets are write-only**: Not even your agent can read them back
- **Singapore**: Apps, databases and files in one region
- **Clear rules**: What is refused is written down

Published 7 October 2026. Facts checked 7 October 2026. 4 min read.

## The short answer

Antideploy is a real platform that runs real apps, and it is run by a small team. It is young, and it says so. Your secrets are encrypted and write-only, your agent's access is limited and revocable, and what it will not host is written down. It does not promise things it cannot keep, such as always-on apps or instant rollback.

You do not have to take this on trust. You can check most of it yourself.

## Who runs it

Antideploy is a young platform run by a small team. You can write to [support@antideploy.com](mailto:support@antideploy.com) and a person answers. The terms, privacy policy and acceptable use rules are public, and so are the platform's limits, which are collected in [what Antideploy cannot run](https://antideploy.com/blog/what-antideploy-cannot-run).

The connector that agents use, `antideploy-mcp`, is open source under the MIT licence, on [GitHub](https://github.com/antideploy/antideploy-mcp).

## Where your code and data live

- **Your app** runs in one region, Singapore, as one instance with 1 shared vCPU and 1 GB of memory (a Java app gets 1 dedicated vCPU and 2 GB).
- **Your database** is Postgres, in Singapore, beside the app. It belongs to your application, and deleting the application deletes it.
- **Your files** go in a private bucket in Singapore. Every object is private, and the key reaches that one bucket only.
- **Your app's email** keeps no subject, body or address. What is kept is how many addresses a message went to, whether it was accepted, and what the delivery report said.

## How secrets are handled

- **Encrypted and write-only.** Values are encrypted when saved. The console shows which variables are set, never what is in them, and your agent cannot read a value back.
- **Your `.env` file.** It is read when you deploy so you do not retype keys. The values go into the encrypted store and the file itself is dropped from the build.
- **Your agent's token.** It is saved on your machine in a file only you can read, and it is never printed in the chat. You can revoke it at any time.

## What your agent cannot do

It cannot delete an app, drop a database, read a secret back, attach a domain or add money to your AI wallet. Those stay in the console, in your browser. See [what your agent can do with your account](https://antideploy.com/blog/what-can-my-coding-agent-do-with-my-antideploy-account) for the full list.

## What is checked and refused

Every deploy that goes live gets an automatic security check of the running app. It looks for mistakes that leak data, such as keys shipped to the browser, a downloadable `.env` file or a wide-open CORS policy. It is free and never holds a deploy up.

Antideploy refuses a short list of things: cryptocurrency mining, remote desktops, remote shells and tunnels, open proxies and VPNs, and malware, phishing and spam. Static sites are checked for phishing pages before they go live. The rules are in the [acceptable use page](https://antideploy.com/docs/acceptable-use).

## What it does not promise

- It does not promise that apps are always on. Apps sleep when idle, and the first request after sleeping takes seconds
- It does not promise zero downtime. A new version replaces the old one on the app's single machine
- It does not promise instant rollback. Going back is a rebuild
- It does not promise global speed. Apps run in one region
- It does not offer team accounts today

## How payment works

The Free plan needs no card. Paid plans are charged in rupees through Razorpay, by UPI Autopay or card. You can cancel from Settings, then Billing, and nothing is deleted when you do. AI model usage is paid from a prepaid wallet, so there is no card on file for it and no surprise bill.

## Safety questions, answered.

Anything else? Write to us and a person answers.

[support@antideploy.com](mailto:support@antideploy.com)

### Can Antideploy read my code?

Your code is sent to Antideploy to be built and run, so the platform handles it. The analysis reads your files to work out how to build and start the app. It reads which environment variables your code expects, never what is in them.

### What happens to my data if I leave?

Cancel from Settings, then Billing. Nothing is deleted, and your existing apps, databases and buckets keep running. Deleting an application deletes its database, and that is permanent.

### Is there an uptime guarantee?

Antideploy does not publish one. Every live app is checked about every five minutes, and you get an email when an app goes down and another when it is back. Read the limits above and decide whether they suit your app.

### How do I report a problem?

Write to [support@antideploy.com](mailto:support@antideploy.com). If you think a project was refused by mistake, tell us the project name and what it does.

## More guides, and the platform.

Each platform page covers one part of Antideploy: what it does, where it stops and the questions people ask. [See the whole platform](https://antideploy.com/platform), or [all the guides](https://antideploy.com/blog).

- [What can my coding agent do with my Antideploy account?](https://antideploy.com/blog/what-can-my-coding-agent-do-with-my-antideploy-account): What your agent can do, what it cannot do, where its token lives, and how to revoke it.
- [What can't Antideploy run?](https://antideploy.com/blog/what-antideploy-cannot-run): The honest list: one region, sleeping apps, no Redis or MongoDB, no background workers, and what is refused.
- [What is Antideploy?](https://antideploy.com/blog/what-is-antideploy): Antideploy deploys what your coding agent built, backend and database included. What it is, who it is for and what it costs.

- [Security checks](https://antideploy.com/platform/security-checks)
- [Environment variables](https://antideploy.com/platform/environment-variables)
- [Agent API](https://antideploy.com/platform/agent-api)
- [Hosting](https://antideploy.com/platform/hosting)

Facts on this page were checked against the live platform on 7 October 2026.

## Deploy something. Start with one sentence.

Paste one sentence into your coding agent, click Approve once, and get a live link. No card, no trial clock.

To set this up, give your coding agent this sentence:

```text
Set this project up to deploy on Antideploy. Fetch https://antideploy.com/agent.md and follow it.
```