Security: FAQs
- A representative of Algolia is asking me to send them money (for a job opportunity etc)
- Is our data in Algolia stored in the cloud?
- Can I submit a Vendor Risk Questionnaire Request to the Support team?
- What’s the difference between the Admin API Key and the Write API Key?
- Is Algolia ITAR compliant?
- Is Algolia GDPR / DSGVO compliant out-of-the-box?
- Who provides the cloud platforms that support Algolia’s services?
- Does an Algolia user get logged out of the dashboard after a certain period of time?
- Which API keys can I expose in my frontend, and how should I protect them?
- How does Algolia IP obfuscation work?
- Can I restrict an index to internal users only?
- Can I send API requests to Algolia via HTTP without TLS / SSL?
- How do I browse or monitor the logs from my Algolia portal?
- How many secured API keys can I create?
- Do API keys expire?
- How do I find my Admin API key?
- How do I restrict application access to a limited number of IP addresses?
- Why is the top HTTP referrer of my operations showing as "None"?
- How can I grant Algolia Support access to my application?
- How do I generate keys?
- How do I fix Content Security Policy (CSP) errors on my site?
- Can I have more than one Admin key?
- How do I look at my logs on the Algolia Dashboard?
- Do you have any kind of On-premises or FedRAMP services?
- What internal logs does Algolia keep?
- How can I update rate limit of auto-generated Search API key?
- How do I see who's updated the index recently?
- How can I rate limit an API key?
- How can I report a security vulnerability to Algolia?
- What should I do if my Algolia API keys are Compromised?