Workspace isolation
Accounts, projects, providers, and data stay scoped.
Security
Secure builds start at setup.
Buildrr keeps workspaces, regions, credentials, approvals, and release evidence explicit.
Connects to the stack you choose
28 provider families. No duplicates.
CloudflareEdge
AWSCloud
AzureCloud
Google CloudCloud
KubernetesRuntime
VercelWeb
NetlifyWeb
Fly.ioRuntime
RenderRuntime
DigitalOceanCloud
Regional policy
Workspace country drives storage and deploy regions.
Project credentials
Secrets are referenced, never stored in lifecycle JSON.
Release gates
Commit, dry-run, approval, rollback, then deploy.
AI boundaries
Tenant data is not used for model training.
Evidence trail
Docs, tests, events, and decisions attach to every run.
Current state
Claims must match controls.
RBAC middlewareCredential vaultScanning pipelineSIEM exportSOC 2 evidence pack