How secure is the Base44 database layer?

Base44 manages database operations through its abstraction layer, which means developers have limited visibility into how data is stored, queried, and protected at the database level. Row-level security, encryption at rest, and fine-grained access controls may not be configurable or may not be enabled by default. Data isolation between different applications or tenants on the platform depends entirely on how Base44 implements its multi-tenancy architecture. UNPWNED can report confirmed public data exposure and externally observable endpoint or configuration signals. Database-query, authorization, encryption, and tenant-isolation logic require direct review.