For the reviewer
Your site is built in one system and served from another, and neither shares storage with another customer.
Siteleon runs on managed infrastructure in European regions. The control plane — the editor, the assistant, the analytics engine, the consent engine and the customer record — is one system. Your published website is a separate one: compiled pages and assets, distributed to the edge protection layer that fronts them and absorbs bad traffic before it reaches an origin. Every site, business fact, lead, integration and AI context object carries a workspace identifier through the storage layer, and authorisation is applied at the data layer rather than in the interface, so an interface mistake does not become someone else's exposure. Credentials for the systems you connect — a Google Ads account, a Stripe key, a Microsoft 365 mailbox — live in a dedicated secrets service and are never written into the generated site.
Build, store and serve are three separate jobs
Editing happens in the control plane, and publishing turns that work into a versioned release of pages and assets. Serving happens at the edge, with TLS, bot and abuse filtering, and rate limiting in front of your forms. A failure in one of the three does not become a failure in the other two, which is the whole reason they are split.
Isolation is enforced in storage, not on screen
Workspace scoping is part of the query, not a filter applied after the fact — a request without a workspace context returns nothing rather than everything. Backups, exports and the assistant's working context inherit the same boundary. Access to production by our own staff is role-based, time-bound and logged.
What you choose and what you can export
You choose your serving region, your domain and registrar, where DNS is managed, and which commercial systems connect at all — a Valencia HVAC firm that wants enquiries in its inbox and nothing else connected can run exactly that. You can take a full export of pages, content, business facts, leads and customer records in open formats, without asking us to prepare it.
Trust Centre
The rest of this area.
For the reviewer, not the owner: how AI uses your data, where it runs, what stays up, and how to report a flaw.
AI & Data Use
What the assistant can read, whose permissions it borrows, which actions need approval, and what it never learns from.
Availability
Your published site is served independently of the editor, so a control-plane problem is not an outage for visitors.
Responsible Disclosure
How to report a vulnerability, what we do with it, and what you can expect from us while we fix it.
Your business online. Built to adapt.
Start with the site you already have, or create something new. Siteleon helps you build it, understand it and keep improving it as the business changes.
No technical setup · Keep your existing site if you want to · [email protected]