Security
Your docs stay yours, and stay separate
A help center that answers customers is only useful if it never answers from someone else’s content, never leaks yours, and never makes things up. This is how PageTruth keeps those promises.
Isolation
One search index per knowledge base
Each knowledge base has its own dedicated vector index. A query names exactly one, so answers cannot cross between customers even if a check upstream were missed.
Row-level security
Every table is protected by Postgres row-level security: membership gates every read, and only admins can change sources and settings.
Private file storage
Files are stored privately and never publicly addressable. Opening one mints a link that expires in 15 minutes.
The assistant
Only your content
Answers are written only from passages retrieved from your knowledge base. It does not browse the web or fall back to general knowledge.
Documents are evidence, not instructions
Text inside a document cannot instruct the assistant. We test this against documents seeded with prompt-injection payloads on every change to the answering pipeline.
Not used for training
Your content is used to answer your customers and nothing else. Our AI providers do not train on data sent through their APIs.
Who can spend your answers
Allowed domains
The widget’s public key only works on the origins you list. Copy the snippet to another site and it refuses to answer.
Hashed API keys
Secret API keys are shown once and stored only as a hash. Revoke one and it stops working immediately.
Deletion that means it
Deleting a source removes the file and its index entries. Deleting a knowledge base removes its index, files, conversations and settings.
Processors
The services that handle your content on our behalf, and where.
| Service | Purpose | Region |
|---|---|---|
| Vercel | Application hosting | United States |
| Supabase | Database and sign-in | United States |
| Amazon Web Services | File storage, search index, document processing | United States |
| Anthropic | Writing answers | United States |
| OpenAI | Search embeddings | United States |
| Stripe | Payments | United States |
| Resend | Email delivery | United States |
The full detail is in our privacy policy. Report a vulnerability or ask a security question at support@pagetruth.com.
Give your customers answers, not a ticket number
Point PageTruth at your docs, publish a help center and drop the widget into your app. The free plan is enough to see it answer your own questions.