Replit
Replit is an agentic software creation platform: describe an app in plain English and its Agent writes, tests, secures and publishes it, with database, authentication and hosting built in for technical and non-technical builders alike.
What is Replit?
Replit is an agentic software creation platform operated by Replit, Inc., a company headquartered in Foster City, California. Its premise is that building software should no longer require writing code: you describe what you want in ordinary language and Replit Agent, now in its fourth generation, plans the work, writes the code, provisions the database and hosting, tests the result and iterates, coordinating parallel tasks across isolated micro-VMs. The homepage offers starting points rather than a blank editor: website, mobile app, design, slides, animation, data visualisation, 3D game, document or spreadsheet. A permanent Free mode lets you create without token costs, and an Infinite Canvas provides a visual space to explore and adjust designs before applying them to the app. Everything a running application needs is bundled in, with what Replit calls zero setup: authentication, database, hosting and monitoring. Integration is the second pillar. More than 450 connectors, among them Stripe, Slack, Plaid, Figma, Notion, Google Workspace, Microsoft 365, Airtable, Shopify, Salesforce, Jira and Razorpay, are exposed to the Agent as MCP tools, so it can authenticate and call live services while it builds. Custom MCP endpoints cover internal systems and proprietary APIs. Security is handled as infrastructure rather than as a feature list. Every customer receives an isolated Google Cloud Platform project, even on the free tier. Projects run in hardened Linux containers with seccomp-bpf policies, with a migration to micro-VMs under way. Secrets are injected by a sidecar proxy and never reach the Agent. Every app is scanned by Semgrep and HoundDog, plus an LLM reasoning layer, before it can be published, and Auto-Protect then watches published apps around the clock for new CVEs. Replit holds SOC 2 Type II certification and works with Trail of Bits and HackerOne. For organisations, the Enterprise tier adds SSO through SAML and OIDC, SCIM provisioning, role-based access control, private deployments, audit logs streamed to a SIEM, a Security Center with CVE scanning and SBOM export, and budgets set per organisation, group or user. Code exports to GitHub, Azure DevOps or a zip archive, and VS Code and Cursor integrations cover the handoff to engineering. Replit claims more than 50 million builders and over 500,000 professional users, and cites Zillow, Databricks, PayPal, Adobe and Talkdesk among its customers.
What it does
- Turn a plain-language description into a working, published application
- Build websites, mobile apps, designs, slide decks, data visualisations, 3D games, documents and spreadsheets
- Connect more than 450 third-party services without writing integration code
- Publish in one click, with hosting, monitoring and custom domains included
- Let the Agent test its own build in a browser and fix the issues it finds
- Build further agents and automations that can be triggered from Slack or email
- Govern app building across an organisation with SSO, SCIM, role-based access, audit logs and budgets
When to use Replit / When not to
A quick filter to help you decide if Replit is the right fit.
When to use Replit
- Product managers and designers who need clickable prototypes, demos and stakeholder decks in hours rather than weeks
- Enterprise teams outside engineering - operations, marketing, sales, finance, HR, legal, IT - building internal tools without raising a ticket
- Founders and small-business owners shipping a first product without hiring a development team
- Developers who want a full stack running immediately, with authentication, database, hosting and monitoring already wired in
- Organisations that need governed app building at scale, with SSO, SCIM, role-based access control, audit logs and per-user budgets
When not to use Replit
- Anyone under 13, who is excluded by the terms of service; users aged 13 to 17 need a parent or guardian's permission
- Teams required to keep data inside the European Union, since Replit hosts primarily in the United States and offers no EU residency option
- Free and Core users who need a contractual guarantee that their content will never improve Replit's models, a commitment that arrives only with the Commercial Agreement on Pro and Enterprise
- Builders expecting to assemble a native iOS or Android app from the Replit phone app, which handles websites and web apps only
- Buyers who need a fixed monthly bill, because effort-based usage credits are charged on top of the subscription and are never refunded
How to use Replit
A typical end-to-end flow, from setup to results.
- Create a free account at replit.com/signup - no credit card is required
- Pick a starting point on the homepage: website, mobile, design, slides, animation, data visualisation, 3D game, document or spreadsheet, or simply write your own prompt
- Describe the application you want in ordinary language, as you would explain it to a colleague
- Refine it through the chat, giving the Agent feedback until the result matches what you had in mind
- Switch on Extended Thinking and High Power models for open-ended or complex requests such as performance work or a design overhaul
- Open the Integrations pane in your project to connect a service; team-managed connectors are configured once by an administrator, personal ones you authenticate yourself
- Let the Agent test the app in a browser, read its report and let it fix what it found
- Publish in one click and attach a custom domain; hosting and monitoring come with it
- Continue from the iOS or Android app when away from your desk, then pick the project back up on a computer
- Export the code to GitHub, Azure DevOps or a zip archive when engineering needs to take over
Pros & Cons
Pros
- The whole chain, from idea to code to test to published app, happens in one place with no setup
- Genuinely usable by people who do not write code, which is the argument the entire product is built around
- A permanent free tier with real generative capability, and no credit card required to start
- Real infrastructure isolation: a dedicated Google Cloud Platform project per customer, even on the free tier
- Security scanning is mandatory before publication, and published apps are monitored for new CVEs afterwards
- Strong compliance footing for this market: SOC 2 Type II, a published DPA, a public subprocessor list and a designated EU representative
- Code exports to GitHub, Azure DevOps or a zip archive, so the output is not locked inside the platform
Cons
- Spending is hard to predict: effort-based usage credits are billed on top of the subscription
- Usage-based charges are never refunded, unlike subscription payments, which can be refunded within 30 days
- On a consumer account, your content may be used to improve Replit's code generation models; the opposite guarantee requires a Pro or Enterprise contract
- Profiles, code and forum posts are visible to other users and search-indexed by default
- Hosting is in the United States only, with no European data residency option
- No interface language other than English is advertised anywhere on the site
- The mobile app cannot build a native app, and the headline prices assume an annual commitment
Pricing & Plans
Replit offers a permanent free plan, named Starter, which costs nothing and includes daily agent credits, the built-in database and one published project. The cheapest paid tier is Core at USD 20.00 per month when billed annually, or USD 25.00 per month on monthly billing. Pro follows at USD 95.00 per month billed annually, or USD 100.00 monthly, and Enterprise is quoted on request. Annual commitment is advertised as up to 20 percent cheaper. Subscriptions are supplemented by effort-based usage credits, billed as consumed and stated to be non-refundable.
- free daily usage
- built-in database
- one published project
- 2 parallel agents
- USD 25 towards the most powerful models
- Plan mode
- unlimited workspaces
- removal of the Made with Replit badge
- 10 parallel agents
- premium support
- USD 100 towards the most powerful models
- up to 15 collaborators and 50 viewers
- database rollback up to 28 days
- custom seat limits
- SSO and SAML
- advanced privacy controls
- single-tenant environments
- static outbound IPs
Data, GDPR & hosting
A consolidated view of how Replit handles your data.
GDPR overview
GDPR implementation is concrete and documented. The privacy policy, last updated on 3 August 2026, sets out the legal bases relied upon - consent, contractual necessity, legal obligation and legitimate interest - and grants rights of access and portability, deletion, correction, opt-out of sale or sharing, and appeal. Replit has appointed DataRep as its Article 27 representative in the European Union, reachable through a dedicated webform. A data processing agreement dated 1 April 2026 is published, incorporating Standard Contractual Clauses modules 2 and 3, a UK addendum and the UK IDTA. A public subprocessor list is maintained. Replit holds SOC 2 Type II certification, states that it complies with GDPR and says it is working toward ISO 27001. Data is transferred to and primarily hosted in the United States; EEA and UK users may also raise concerns with their local supervisory authority.
Who owns the data?
Under the terms of service you keep every right in the content you submit, post or display. Replit takes only the licence it needs to operate: copying, displaying, distributing, reformatting and modifying your content, with the right to sub-license that to the providers behind the service. Replit itself owns the platform and its software. It also reserves access to the contents of private apps for troubleshooting, service improvement and security. Under the Commercial Agreement covering Pro and Enterprise, the customer retains all rights in Input Content and owns the Output Content. Note that profiles, code and forum posts are visible to other users and indexed by search engines by default.
Reuse rights
Replit collects the code, project files, prompts and commands you enter, together with the responses the platform generates, and states that it uses them to run and improve the service, to communicate with you, for marketing, to prevent fraud and to meet legal obligations. Its privacy policy claims legitimate interest in using personal data to improve the accuracy of its machine learning technologies, code generation among them. That does not extend to commercial customers: the Commercial Agreement forbids Replit from using Customer Content to develop or improve its products or to train machine learning models, and the enterprise documentation states plainly that enterprise customer data is not used to train any models. Data is shared with a published list of subprocessors, which includes Anthropic, OpenAI, Google, OpenRouter and Baseten for AI models, alongside Stripe, Cloudflare, Zendesk and others. A Do Not Sell link in the footer lets you opt out of the sale or sharing of personal data for advertising.
Data retention & training
Hosting summary
Replit hosts customer data on Google Cloud Platform and gives every customer its own isolated GCP project, including on the free tier, so that separation happens at the infrastructure level rather than only logically. The privacy policy states that the services are primarily hosted in the United States and may also be hosted elsewhere, and that using the service means accepting that transfer. Every one of the 46 subprocessors on the published list is located in the USA, and the cloud providers named among them are Google, Cloudflare, Microsoft Azure and HashiCorp Cloud. Data is encrypted with AES-256 at rest and TLS 1.2 or above in transit. Enterprise customers can obtain single-tenant environments and a dedicated GCP project. No European data residency option is offered.
Things to keep in mind
Risks and trade-offs to weigh before adopting Replit.
- Usage credits are consumed as the Agent works and are never refunded, while only subscription payments can be refunded within 30 days
- The advertised prices assume an annual commitment; monthly billing costs USD 25 for Core and USD 100 for Pro
- On a consumer account, your prompts and code may feed the improvement of Replit's code generation models
- Profiles, code and forum posts are visible to other users and indexed by search engines unless you change that
- Replit reserves the right to access the contents of private apps for troubleshooting, service improvement and security
- Disputes go to arbitration and class actions are waived unless you opt out within 30 days of agreeing to the terms
- The Agent is probabilistic and can be wrong, which the vendor states openly; shipping generated code without reading it transfers real risk onto whoever runs the app
Setup & Integrations
Technical difficulty
Very low to start. Nothing is installed: everything runs in the browser, the account is free and no credit card is asked for. Authentication, database, hosting and monitoring are described as working with zero setup, and connectors handle their own OAuth flows and API keys, so no integration code is needed. Building and publishing an app requires no coding skill at all. Difficulty appears only on the organisational side, where SSO and SAML, SCIM provisioning, role-based access control and central policies call for an IT administrator.
Deployment
Apps stores
Integrations
Behind Replit
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Replit.
Frequently asked questions
Do I need to know how to code to use Replit?
Is there a free plan?
What does the cheapest paid plan cost?
Does Replit deploy the app for me?
Can Replit build mobile apps?
Where is my data hosted?
Is my content used to train AI models?
What certifications does Replit hold?
Is there an API?
How old do I have to be?
Should you pick Replit?
Replit has made a clear bet, and the whole site defends it: software creation should be open to people who do not write code. On that promise it delivers unusually well. The Agent takes a description and returns a published, hosted application, with authentication, a database and monitoring already wired in, and it tests and repairs its own work along the way. The catalogue of more than 450 connectors means the app can talk to Stripe, Salesforce or Notion without anyone writing integration code. What sets it apart from lighter tools in the same market is the seriousness of the infrastructure underneath. A dedicated Google Cloud Platform project per customer, from the free tier upward, hardened containers, secrets the Agent never sees, and a mandatory security scan before publication are real guarantees rather than marketing lines. SOC 2 Type II, a published data processing agreement, a public subprocessor list and a designated EU representative round out a compliance posture that many competitors do not match. Two reservations deserve attention. The first is cost: effort-based credits are billed on top of the subscription, they are not refundable, and the headline prices assume annual commitment. The second is data. On a consumer account, Replit invokes legitimate interest to improve its code generation models with your content; the guarantee that it will not is contractual and arrives only with the Commercial Agreement on Pro and Enterprise. Hosting is United States only, with no European data residency option. For a product team, an operations group or a founder who needs working software this week, Replit is one of the strongest options available. For a regulated European organisation, or for anyone who needs the bill to be predictable, read the pricing and privacy terms closely first.
- Choosing a selection results in a full page refresh.
- Opens in a new window.