Security
Safe to point at your real app, and to put in front of your users
Skavelo reads your app to learn it and runs inside it to help your users. Here is exactly what that involves: what it does while learning, what the widget sends, how actions stay in the user’s hands, and how your data is handled.
Learning changes nothing
Learning is read-only by design, with more precautions for signed in apps.
What it does
- Opens the address you gave it and follows links on the same domain.
- Signs in with your test account, if you added one.
- Opens menus, tabs and dialogs to see what’s behind them, and reads the text, buttons, links and fields on each screen.
What it never does
- Sends anything that would change your data. While it learns, every request that isn’t a read is blocked in the browser before it leaves, and so is every websocket message.
- Clicks controls that sound like an action, such as save, send, delete, pay or log out, or any submit button, or anything inside a menu or dialog it opened.
- Leaves your domain, reaches private networks like localhost, or reads pages your robots.txt asks crawlers to avoid.
Use a dedicated test account with sample data, ideally on staging. Its password is encrypted when you save it, used only to sign in while learning, and never shown again. Skavelo identifies itself as SkaveloBot.
What the widget sends
To answer well, Skavelo needs some context about the page a user is on. It collects as little as it can.
| Sent with each question | Why |
|---|---|
| The question | So Skavelo can answer it |
| The page address and title | So answers fit where the user is |
| Visible buttons, links and headings, with their labels and positions | So it can name the right controls and run walkthroughs |
| What your app passes to identify, if anything | So answers fit the user’s plan and role |
| Error messages on the page, and switched off buttons with their reason | So it can explain why something isn’t working |
| Your app’s requests that failed in the last 2 minutes: method, path and status only, with IDs removed | So it can tell a permissions problem from a billing one. You can switch this off |
Never sent
- Anything users type into fields, text areas or rich-text editors
- Password fields and editable areas, which are reduced to their type with no content
- Anything inside an element you mark with data-sk-sensitive
- The content, headers or query string of any request your app makes
- Users’ names and emails, which your team sees in Conversations but the AI model never receives
The widget runs in an isolated layer, so it can’t read or change your page’s styles, and only on the sites you allow. Identity verification stops users posing as someone else.
Lookups and actions stay in the user’s hands
Skills connect Skavelo to your API. Your first one is free on every plan.
Off until you turn them on
New actions start switched off, and only owners and admins can create them.
Approved every time
The user sees the action and every value first. Nothing is sent until they click Run action.
The user’s own permissions
Lookups and actions go from the user’s browser with their session, only to paths on your app.
Data isn’t kept
What a lookup returns is used to write the answer, then dropped. Only the answer is saved.
Text can’t take control
Pages, documents and data are full of text Skavelo reads. None of it is followed as an instruction.
Content Skavelo reads on a page, in a document or in data a lookup returned is treated as information, never as instructions. Nothing a visitor types, and nothing Skavelo reads, can turn on a skill, reveal data or change how an agent behaves. Only your team can change an agent’s settings.
Your data
No training on your data
Your data and your users’ conversations never train AI models.
Kept until you delete it
Conversations, knowledge and settings stay until you delete them. Deleting an agent deletes all of its data.
User requests, handled by you
Find, download or delete one user’s conversations yourself, for example when they ask under privacy law.
A published DPA
Every plan includes our Data Processing Agreement.
Read the Privacy Policy, Data Processing Agreement and security guides in the help center.
Certifications
Skavelo doesn’t hold SOC 2 or ISO 27001 certification yet. If your review needs details of how we protect data, email hello@skavelo.com and we’ll answer your questions directly. The same address is the place to report a security issue.
Try it on your own product, with a test account, before you add any code.
Start free