By Replit can host a production app: since the July 2025 database deletion it separates development and production databases by default and keeps the Agent out of production data. It is safe for your app once you have tested a restore, put keys in Secrets, and pushed the code to GitHub.
The question usually comes from one story. In July 2025, Replit's Agent deleted a production database belonging to SaaStr founder Jason Lemkin during a session where he had asked for a code freeze. Replit's CEO called it unacceptable and said it should never be possible. Replit then announced automatic separation of development and production databases, and pointed to one-click restore of a project's state.
What Replit looks like now, from its own docs:
- Every app gets a development database. A separate production database is created when you publish, and the published app uses only that one. The docs state that the Agent is not able to modify the production database.
- Structure changes you make with the Agent, such as new tables or columns, are applied to production at publish time. Publishing can cause brief downtime.
- Checkpoints roll back code, and optionally the development database, with up to seven days of history. Rolling back does not touch the production database.
- Production databases have point-in-time restore. Core plans keep seven days, Pro and Enterprise up to 28. Restoring the database does not revert the code, so you roll back the app separately and publish again.
- Deployments run a saved snapshot of your app. Autoscale deployments list 99.95% uptime. Deployments have no persistent file storage, so files saved to disk are lost on redeploy.
- Secrets are encrypted and provided to the published app as environment variables. Collaborators can see secret values, so share the project with care.
That is a reasonable production setup. The gaps are on your side, and the forum shows them. In January 2026 a user reported a platform error where the rollback failed and no usable backup was available. In September 2026 another lost two months of work after assuming the GitHub sync was committing when it was not. Both are reasons to test your own safety net, not to trust the default.
What to check on your own project:
- Open the Database tool and confirm there are two databases, development and production, and that real users' data is only in production.
- Restore a backup into the development database once, so you know the steps and how long it takes.
- Open Publishing, Adjust settings, and confirm every key the app needs is listed under production app secrets. Search the code for keys pasted in by hand.
- Push to GitHub and open the repository. Check the latest commit date matches your latest work.
- If the app calls an AI model, add a per-user limit so one loop cannot spend your month's budget.
Money and time. A check of these points is $49–$800 and takes a day to a week. Setting up backups, monitoring and limits properly is usually part of a cleanup at $1,500–$15,000 over one to eight weeks. See pricing.
Get help when you cannot find a production database, when a restore has never been tested, when keys are in the code, or when costs climb faster than users. The Replit guide goes into each item.
Check these
Database backups run automatically and a restore has been tested
Check what your database plan actually includes, then restore a backup into a test project once.
Testing and real users use separate databases
Experiments and AI agents should never run against production data.
Secrets live in the host's environment settings
Keys belong in environment variables on the server, not in the repository or in front-end code.
The code lives in a Git repository you own
Connect GitHub or export the project. If the builder account is lost, the product should not be.
AI and paid API calls have per-user limits
Without a cap, one user or one bot loop can spend your monthly budget in an hour.
Top-rated companies for Replit apps
Ranked by our score: published prices, scope of work, AI tools named, timing and a low-risk first step. How we score.
- 1Afterbuild Labs10.0/10Best for: A check before launchFree first step · from $49
- 2Redlab10.0/10Best for: A full rescue by one team that keeps buildingFree first step · from $490
- 3Vibe Code Rescue (Lev Arakelyan)9.0/10Best for: A one-off check and a cleanupFrom $299
Related questions
Can the Replit Agent still delete my production data?
Not through its normal tools. Replit's docs say the Agent can only edit the development database. You can still edit production data yourself in the Database tool, and a person with your login can too, so keep backups and test a restore.
Do I need to move off Replit to be safe?
No. The hosting and database are fine for most apps. Moving makes sense when you need a provider Replit does not offer, or when the app has outgrown what you can manage inside one workspace. A GitHub copy of the code keeps that option open.
Sources: The Register: Replit promises to stop its AI agents making vibe coding disasters (July 2025); Replit docs: Development and production databases; Replit docs: Data recovery; Replit docs: About Deployments.