Canvas runs in a sandbox environment, allowing me to make secure API calls with network controls.