Designed around controlled access

AI assistance, without access to private systems

SiteMind AI answers visitor questions using your public website content while remaining separate from passwords, payments, customer accounts, admin areas and databases. One lightweight widget, locked to your approved domain.

How the SiteMind AI widget works

Add one lightweight script to your website. It loads a separate chat layer and connects to your configured AI agent through protected API endpoints — without requiring access to your CMS or hosting account.

01

One embed code

Install one small script to load your configured assistant. No complex integration or website credentials are required.

02

Public content only

The assistant answers from scanned public pages and visible page context, keeping its knowledge relevant to your business.

03

Visitor guidance

It explains products and services, guides visitors to the right page and supports the next step without controlling the website.

What the widget does not access

SiteMind AI works as a visitor-facing assistant. It is not an administrative tool and receives no credentials for your website's private systems.

We describe our product boundaries precisely. This page explains the intended SiteMind AI design and does not claim an external security certification for SiteMind AI itself.
  • ×Passwords or login fields
  • ×Payment data, card details or checkout forms
  • ×Orders, private customer accounts or user dashboards
  • ×Website admin areas, CMS access or databases
  • ×Hidden server-side data or private files

Security safeguards built into the product

Practical controls limit where the assistant runs, what it can use and which parts of your digital infrastructure remain outside its reach.

URL

Domain-locked agents

Each agent is authorized for a configured website domain. If its embed code is copied elsewhere, the agent is blocked from running.

IF

Isolated widget layer

The chat runs in a separate widget layer. It is not designed to change products, orders, page content or website settings.

KEY

Protected API keys

Service API keys remain on the backend and are never included in the public embed code installed on your website.

SSL

HTTPS communication

Communication between the website, widget and SiteMind AI services is delivered over encrypted HTTPS connections.

Data used by SiteMind AI

SiteMind AI processes only the information needed to provide relevant answers, operate your account and help you understand what visitors are looking for.

  • Public website content and scanned page information
  • Chat questions and answers shown in the dashboard
  • Basic website analytics such as page, time, device and country/city where available
  • Account and billing information needed to provide the SaaS service
Website owners can remove the widget at any time by deleting the embed code from their website.

Security FAQ

Direct answers to the questions business owners usually ask before adding SiteMind AI to their website.

Is SiteMind AI safe to install?

SiteMind AI is designed as a security-conscious widget. It is domain-locked, isolated and not designed to access passwords, payment data, orders, admin areas or databases.

Can the widget read checkout or payment forms?

No. SiteMind AI is not designed to read card details, payment data, checkout forms or other sensitive payment fields.

Can someone copy my embed code?

The agent is locked to the configured website domain. A copied embed code should not work as a free agent on unrelated domains.

Does SiteMind AI access my website database?

No. The widget is not given access to your website database, CMS admin login or server-side private files.

Can I remove the widget later?

Yes. You can remove SiteMind AI by deleting the embed code from your website.

Is SiteMind AI externally certified?

This page does not claim that SiteMind AI itself holds an external security certification. However, SiteMind AI uses trusted infrastructure services that maintain recognized security and compliance attestations such as SOC 2 Type II, ISO/IEC 27001:2022 and, where applicable, PCI DSS v4.0.

Give visitors better answers. Keep control of your website.

Add an AI assistant built for public website guidance, with clear separation from passwords, payments, admin areas and private systems.