> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mythex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security for apps you build

> Practical security habits — secrets, server-side keys, and not inventing compliance claims.

# Security for apps you build

Mythex does not include a security-scan product panel. Use these habits while building:

* Store API keys in [Secrets](/features/env-and-secrets) — never commit them
* Prefer **server-side** use of privileged keys
* If a secret appears in chat, **rotate** it
* Ask the agent to validate input and avoid exposing internal errors to users
* Do not invent SOC2 / compliance claims in your app copy unless you have them

## Related

* [Secrets in chat](/features/secrets-in-chat)
* [Environment variables and secrets](/features/env-and-secrets)
* [Data ownership](/reference/data-ownership)