Your data stays yours
Security pages are usually written after the enterprise deal stalls. We wrote ours first, honestly, separating what is live today from what is on the Enterprise roadmap. We claim no certification we do not hold.
What is true right now
Your data stays yours
We do not sell data, rent lists, or train models on your site's content. We use it for the analysis you asked for and nothing else.
Minimal collection
An account takes an email address and a 6-digit code, no password. The audit fetches only the public page you point it at, the same HTML any visitor sees, and caches the result for six hours to save repeat work.
Encryption in transit
The site and every API call behind it run over TLS. Demo audits and signups never travel in the clear.
Least access
Secrets live in server-side configuration, never in client code. The AI provider key that powers the demo is not exposed to your browser.
Planned for launch, stated as plans
The Enterprise tier includes SSO (SAML and OIDC), roles and permissions, an uptime SLA, invoicing, an audit log and a security review with your team. Site connections for the publish step use scoped tokens you can revoke at any time, and every published change carries an audit trail. If your procurement needs specifics, email us and we will answer honestly, including the things we have not built yet.
Data questions, deletion requests and anything privacy-shaped are covered in the privacy policy, and deleting your data is a one-email operation.
Security questions before joining?
Ask them first: [email protected]. Or join the list and reply to our confirmation email; both land with a human.
We do not train on your content and we do not sell your data. Read the security page.