> ## Documentation Index
> Fetch the complete documentation index at: https://www.activepieces.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Sandboxing Mode

> Choose how flow code is isolated and set AP_EXECUTION_MODE accordingly

Decide how flow code is isolated before you go to production. Here is a simplified way to choose:

> [!TIP]
>
> **Multi-tenant** → use V8 / Code Sandboxing. Secure, and needs no privileged Docker access in Kubernetes (privileged Docker is usually disallowed to prevent root escalation).

> [!TIP]
>
> **Single-tenant** → use No Sandboxing. Faster, and needs no privileged Docker access.

Set the mode with the `AP_EXECUTION_MODE` environment variable. The table below lists every mode and its exact value:

<Snippet file="execution-mode.mdx" />

> [!NOTE]
>
> Want the reasoning behind each mode — how `fork()`/V8 isolation and kernel-namespace isolation actually work, and their security trade-offs? See [Sandboxing](https://www.activepieces.com/docs/install/architecture/sandboxing.md) in the Architecture section.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.