Security & data
How Renderly protects your account, keys, files and credits, stated plainly, including what has not been done yet.
Last updated:
API keys are stored as hashes.
Renderly stores only a SHA-256 hash of each API key. The full key is shown once, when you create it, and cannot be displayed again. Store it in your server environment or secret manager.
Each key has its own permissions and can be revoked from Settings → API access at any time. A key can also carry a monthly spending limit.
Webhooks are signed.
Each webhook delivery carries a Renderly-Signature header with a Unix timestamp and an HMAC-SHA256 signature of the timestamp and the raw request body, computed with your endpoint secret.
Verify the signature before trusting a delivery, and reject deliveries whose timestamp falls outside your tolerance window to prevent replays.
Every account is isolated.
Balances, ledger entries, requests, API keys and files belong to one account in the database. Database access rules limit each signed-in session and each API key to the records of its own account.
Files are private and expire.
Uploaded inputs and generated results are stored privately. Downloads use signed links that expire after 15 minutes; request a new link when you need another download.
| Data | How long it is kept |
|---|---|
| Generated results | 7 days by default. Choose from 1 hour to 30 days for your account or for an individual result. |
| Uploaded input files | 24 hours. |
| Signed download links | 15 minutes. |
| Account, request and ledger records | As needed for the service and for legal, accounting, security and dispute obligations. |
Your content does not train models.
Renderly does not use your prompts, uploads or results to train models. The model provider that runs a request processes it only to generate the result.
Credits come back when a result is not delivered.
A job reserves at most the price you approved. If a charged request does not deliver a valid result, its reserved credits return to your balance automatically and the return is recorded in your ledger.
No advertising or analytics trackers.
The website uses essential browser storage and the preferences you choose. No advertising or analytics trackers are configured.
Compliance status.
Renderly has not completed SOC 2 or ISO 27001 audits and holds no security certifications. If your organization needs a security review, describe your requirements and we will answer what we can.