How WebChat AI keeps your data and your visitors' conversations safe — secure widget, domain control and privacy by default.
Security
Security is part of the widget itself — not an afterthought.
No secrets ship to the browser. The widget authenticates entirely with server-issued, short-lived tokens.
An origin allowlist is verified on every widget request. An empty allowlist blocks embedding until you configure domains.
Responses are grounded in your crawled content, with spam screening built in.
Widget sessions expire in minutes and slide on a validity window, so abandoned sessions cannot linger.
Per-widget, per-visitor and per-IP limits throttle abusive traffic and keep your assistant responsive.
Your content, conversations and credentials are scoped to your account — never shared across tenants.
Connect your site, build your knowledge base and start helping visitors in minutes — not days.
WebChat AI