Specific controls.
Contactable people.
No badges we do not hold.
Last reviewed 10 sep 2026. These resources describe the current product and keep remaining provider actions visible without claiming certifications SiteAirbag does not hold.
For the person signing off
- It cannot break your site. It never blocks a click, cancels a form or changes a response. If SiteAirbag is slow or down, your site behaves as if it were never installed.
- It does not watch your visitors. SiteAirbag never reads what your visitors type, never records their screens, and never follows them around the web. It only watches whether the one action you chose worked.
- Only your own domain can install it. Installation needs a single-use code checked from your exact domain; one script tag on every page, no plugin.
- Data stays with named providers. Account and protection data is stored with Supabase in the EU (Frankfurt). Every provider is listed on Subprocessors.
- No badges we do not hold. No SOC 2, ISO 27001 or uptime SLA is claimed. A real person answers: we try to reply within 48 business hours.
Trust documents
Security
Runtime authority, tenant isolation, minimization and disclosure process.
Privacy
Data map, roles, purposes, retention and individual rights.
Data Processing Addendum
Controller/processor terms and security commitments.
Subprocessors
The providers that may support the configured service.
Customer-site monitoring
Observed signals, customer authority and fail-open boundaries.
Data retention
Current application retention and deletion periods by category.
Terms
Eligibility, service, billing, responsibility and liability terms.
Acceptable use
Prohibited data, unauthorized deployment and harmful activity.
Storage and cookies
Necessary storage and consent-controlled product analytics.
Cancellation and refunds
Renewal, cancellation timing and mandatory-rights carve-outs.
Responsible disclosure
Safe reporting route and research boundaries.
Accessibility
Accessibility approach, limitations and barrier reporting.
Coverage
Coverage by mechanism, where observation stops and where the script goes on each platform.
Service status
Current readiness without invented uptime history.
Support
Product, billing, privacy and security contact routes.
Have a question a document does not answer?
Reach a real person — product, security, privacy or legal. We try to reply within 48 business hours.