SiteSignal
How SiteSignal stores and protects your data, and how to report a security issue.
TLS 1.2 / 1.3 Encrypted in transit
AES-256 Database and file storage encrypted at rest
US Data hosted in AWS us-east-1
Where your data lives
The SiteSignal app runs on Amazon Web Services (AWS) in the US East (N. Virginia) region. Account and monitoring data is stored in a managed PostgreSQL database from Supabase, also hosted on AWS in us-east-1, and is encrypted at rest with AES-256. Reports and uploaded files are stored in Amazon S3 with AES-256 server-side encryption.
In transit
The app, the API and this website only accept encrypted connections over TLS 1.2 or TLS 1.3. Older protocols (TLS 1.0 and 1.1) are refused. The app and API sit behind Cloudflare, which handles DNS, filters malicious traffic and protects sign-up forms with a CAPTCHA (Cloudflare Turnstile).
How we handle your data
Your website data, AI audit reports and account details are never sold. We share data only with the service providers that run SiteSignal, listed in our Data Processing Agreement. Payments are handled by Stripe; we never see or store your full card details. SiteSignal checks your site from the outside, so it needs no access to your hosting, CMS or code.
Report a Vulnerability
If you are a security researcher or have found a potential issue, email hi@sitesignal.app with “Security” in the subject line. We reply within one business day.