Security

Your site and your data

• Your own private server. Your workspace runs on its own machine, never mixed with anyone else's, and the AI service keeps none of your page text.
• Two-step sign-in. A code from an authenticator app each time you sign in, on by default for every workspace.
• Every change can be undone. PageSoar keeps what each page said before and puts it back in one click.
• Where it runs. In the United States (Chicago, on Fly.io). Every company that handles your data is on the Subprocessors page. Ask us any time to export or delete your data.

Report a security issue

Found a vulnerability? Write to support@pagesoar.com with “Security” in the subject and how to reproduce it. A person replies. Give us time to fix it before telling anyone, and do not access data that is not yours.

What happens next

• We confirm we have your report, usually within two working days.
• We look into it, fix what we find, and tell you when it is fixed.
• If you want credit, we will name you when we describe the fix.

What to test

PageSoar’s website and app at pagesoar.com, and the Connector plugin. Do not test a customer’s website, overload the service or trick our staff. security.txt has the same contact.

Changes

• 23 October 2026: Adds how PageSoar looks after your site and your data: your own private server, two-step sign-in, undo, and nothing extra to sign up for or pay.
• 25 September 2026: First published.