How are applets kept safe?
An applet renders in an isolated frame with no network access and reaches the workspace only through a narrow bridge that needs a real user click. Backend functions run isolated too.
Applet UI runs in a sandboxed frame with no network, no arbitrary package loading, and no direct browser persistence; the allowed charting and table libraries are inlined at build time. It talks to the workspace only through a small bridge, and calls that touch the visible client require a trusted user click. Optional backend functions run in an isolated runner with no ambient network or filesystem, acting only through declared capabilities.
Written for it and security, developers. Last reviewed 2026-09-15.
Related questions
Still need an answer?
Tell us what you were looking for and we reply within one business day.
Contact the team →Running a security review?
Documents, controls, and the request form live in the Trust Center.
Open the Trust Center →