Auth
Auth and tenant scope
- Private dashboard and admin routes use server side auth checks. Normal users cannot access admin routes.
- Workspace data is tenant scoped by workspace id, and AI Agent data is scoped by workspace id plus AI Agent id.
Widget
Widget checks
- Widget APIs validate AI Agent status, domain allowlist, visitor session, rate limits, the AI reply allowance, and admin pause state.
Data
Visitor data
- Visitor analytics store coarse context such as country, device, browser, language, page URL, and referrer. Raw IP addresses are not stored for analytics.
- Rate limit keys use hashed IP derived values. Runtime monitoring stores hashed IP only when needed.
AI
AI and prompts
- Answers are written by Google Gemini by default. On paid plans a workspace can set an AI Agent to answer with a Claude or GPT model instead, which sends its conversations to Anthropic or OpenAI. Visitors never choose the model, and it is never shown to them.
- Prompt leakage and data extraction attempts are blocked and logged as monitoring events.
AI environment
AI_PROVIDER_API_KEY=
AI_CHAT_MODEL=
AI_EMBEDDING_MODEL=
AI_EMBEDDING_DIMENSIONS=Next doc
Admin monitoring
Super admins monitor platform analytics, AI Agents, workspaces, conversations, usage, plans, support, notifications, and settings.