> ## Documentation Index
> Fetch the complete documentation index at: https://runcrate.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Security FAQ

> Frequently asked questions about security, data protection, and access control.

export const RuncrateStyles = () => {
  if (typeof document !== 'undefined' && !document.getElementById('runcrate-overrides')) {
    const s = document.createElement('style');
    s.id = 'runcrate-overrides';
    s.textContent = `
      /* Match Runcrate's rounding scale (--radius: 0.75rem) */
      .rounded-sm { border-radius: 0.5rem !important; }   /* 8px */
      .rounded-md { border-radius: 0.625rem !important; } /* 10px */
      .rounded-lg { border-radius: 0.75rem !important; }  /* 12px */
      .rounded-l-sm { border-top-left-radius: 0.5rem !important; border-bottom-left-radius: 0.5rem !important; }
      .rounded-r-sm { border-top-right-radius: 0.5rem !important; border-bottom-right-radius: 0.5rem !important; }
      .rounded-l-md { border-top-left-radius: 0.625rem !important; border-bottom-left-radius: 0.625rem !important; }
      .rounded-r-md { border-top-right-radius: 0.625rem !important; border-bottom-right-radius: 0.625rem !important; }
      .rounded-l-lg { border-top-left-radius: 0.75rem !important; border-bottom-left-radius: 0.75rem !important; }
      .rounded-r-lg { border-top-right-radius: 0.75rem !important; border-bottom-right-radius: 0.75rem !important; }

      /* Cards: never pure white in light mode */
      .card { background-color: #fcfcfc !important; border-radius: 0.75rem !important; }
      html.dark .card { background-color: #141414 !important; }

      /* Docs hero box */
      .rc-hero { background-color: #fcfcfc; border: 1px solid #e0e0e0; }
      html.dark .rc-hero { background-color: #141414; border-color: #242424; }
      html.dark .rc-hero h1 { color: #f5f5f5; }

      /* Runcrate scrollbar — thin, transparent track, hide-until-hover thumb */
      ::-webkit-scrollbar { width: 6px; height: 6px; background-color: transparent; }
      ::-webkit-scrollbar-track { background-color: transparent; }
      ::-webkit-scrollbar-thumb { background-color: rgba(155, 155, 155, 0.5); border-radius: 10px; transition: opacity 0.3s ease; opacity: 0; }
      ::-webkit-scrollbar-thumb:hover { background-color: rgba(155, 155, 155, 0.7); }
      *:hover::-webkit-scrollbar-thumb,
      *:focus::-webkit-scrollbar-thumb,
      *:active::-webkit-scrollbar-thumb { opacity: 1; }
      * { scrollbar-width: thin; scrollbar-color: rgba(155, 155, 155, 0.5) transparent; }
    `;
    document.head.appendChild(s);
  }
  return null;
};

<RuncrateStyles />

<AccordionGroup>
  <Accordion title="How is my data protected?">
    Each GPU instance runs in an isolated container. Your data is not accessible to other users. Storage volumes are private to your workspace and encrypted at rest by the storage backend (Wasabi, AWS S3, or Backblaze B2).
  </Accordion>

  <Accordion title="How do I control access to my instances?">
    Instances are accessed via SSH using keys you register in the dashboard. Only public keys you add to your workspace are injected into new instances. See [SSH Keys](/account/ssh-keys) for setup.
  </Accordion>

  <Accordion title="How are API keys secured?">
    API keys are shown in full only once at creation. They are stored securely and transmitted over HTTPS. You can deactivate or delete keys at any time. Keys are scoped to a single workspace. See [API Keys](/account/api-keys) for best practices.
  </Accordion>

  <Accordion title="Does Runcrate have role-based access control?">
    Yes. Each workspace supports three roles: **Owner**, **Manager**, and **Developer**. Owners have full control, Managers can manage resources and billing, and Developers can deploy and manage resources but cannot access billing or team settings. See [Teams](/account/teams) for the full permissions table.
  </Accordion>

  <Accordion title="Can I see who did what in my workspace?">
    Yes. [Audit logs](/account/audit-logs) record every significant action in your workspace, including who performed it, when, from what IP address, and what was changed. Audit logs are available to Owners and Managers.
  </Accordion>

  <Accordion title="How are payments secured?">
    All payment processing is handled by **Stripe**, which is **PCI DSS Level 1** certified — the highest level of payment security. Runcrate never stores your full card details. See [Payment Methods](/billing/payment-methods) for more.
  </Accordion>

  <Accordion title="What happens to my data when I terminate an instance?">
    When you terminate an instance, the container and any data stored locally on the instance are deleted permanently. Data stored on a mounted **storage volume** persists and remains accessible. See [Storage Overview](/storage/overview) for details.
  </Accordion>
</AccordionGroup>