Fern’s documentation platform is built with security as a core principle, using a client-side architecture for authentication and credential handling. User credentials and sensitive data are stored only in browser cookies and never transmitted to Fern’s servers.
Contact support@buildwithfern.com for security reviews, additional documentation, or specific compliance requirements.
Fern supports multiple authentication methods to secure your documentation. All methods use a client-side fern_token cookie stored entirely in the browser:
These cookies are managed entirely client-side and automatically cleared when the user logs out or the session expires. This approach ensures that sensitive credentials remain under your control and are never exposed to Fern’s infrastructure.
For organizations that operate in air-gapped environments or need full control over documentation servers, Fern offers self-hosted deployments.