Skip to main content
User code in one flow cannot read another flow’s code, memory, environment, or files. Each flow executes in its own isolated environment.
This is one of the Activepieces execution guarantees for the recommended production setup. For the full scope and Cloud parity, see Crash Recovery.

​
How it’s enforced

Two layers stack:
  • Sandbox. Each flow’s code runs inside a sandbox chosen by AP_EXECUTION_MODE: V8/code isolation for multi-tenant, or kernel-namespace isolation. See Sandboxing for how each mode works and its trade-offs.
  • One flow per worker. At AP_WORKER_CONCURRENCY=1 there is only ever one flow in a container, so even the container’s filesystem and memory belong to a single flow.

​
Where it stops

This is execution isolation between flows: code, memory, and filesystem. It is distinct from tenant data isolation at the query layer (every database query scoped to projectId / platformId), which is an application-level guarantee enforced in the API, not by the sandbox. For that, see the security documentation. Choosing the right sandbox is the most important security decision for multi-tenant deployments; a weaker AP_EXECUTION_MODE narrows this guarantee.

​
Governing configuration

VariableRecommendedEffect
AP_EXECUTION_MODEV8 / code sandboxing for multi-tenantHow user code is isolated from the host and other flows
AP_WORKER_CONCURRENCY1One flow per container, no shared filesystem or memory
See Sandboxing Mode to set the value.