Security

This page describes the security controls you can see and use in Outrun. It is for workspace admins and anyone assessing Outrun's security.

Sign-in

Members sign in with a 6-digit code that Outrun sends by email. The code is valid for 10 minutes. Outrun does not use passwords.

Extra login methods

Each member can add more login methods:

1. Select Account in the sidebar.
2. Under Login Methods, set up an Authenticator app or add a passkey.
3. Optionally, choose Make preferred on the method you want to use first.

Once you set up an authenticator app or a passkey, recovery codes are available under Login Methods. Store them somewhere safe. You can use one to sign in if you lose your authenticator app or passkey.

Team access

Admins control what each member can do in Admin > Team. You can apply a preset, Viewer, Editor or Admin, or choose individual permissions.

For programmatic access, use API keys with their own permissions. See API authentication.

Connected app credentials

When you connect an app, Outrun stores its access credentials encrypted with AES-256.

Workspace separation

Each workspace's data is stored separately from every other workspace's data. To choose the region where it is stored, see storage.

Data protection terms

Our contractual commitments for processing your data, including the list of sub-processors, are in the Data Processing Agreement.